CVE-2021-3029

CRITICAL 9.8CVE-2021-3029 · Published 07/01/2021 · updated 17/06/2026

In short

CVE-2021-3029 is a CRITICAL (CVSS 9.8) vulnerability affecting ecs imaging (evolucare).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ecs imaging evolucare	`≤ 6.21.5`	No fix yet

Description

EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter "file" on the webpage /showfile.php can be exploited to gain root access. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

shoxxdj.fr/ecsimaging-os-injection-cve-2021-3029 · Third Party Advisory
evolucare.com · Product

More vulnerabilities in ecs imaging

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free