CVE-2021-3243

MEDIUM 6.1CVE-2021-3243 · Published 15/04/2021 · updated 17/06/2026

In short

CVE-2021-3243 is a MEDIUM (CVSS 6.1) vulnerability affecting wfilter internet content filter (wfiltericf).
Chance of exploitation in the next 30 days (EPSS): 0.73%, higher than 54.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wfilter internet content filter wfiltericf	`= 5.0.117`	No fix yet

Description

Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function.

References

drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free