CVE-2021-35402

CRITICAL

Prolink PRC2402M 'satellist_list' Command Injection Vulnerability

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2021-35402 has a selected CVSS score of 10.0 (critical).

Description

PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Mar 25, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 23, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

PRC2402M

Browse PROLiNK / PRC2402M

Default status: unknown

CVE List, VulnCheck20190909 to < 2021-06-13affected

References

2