Back to Database
Status published
Critical
CVE-2021-33841
Circutor SGE-PLC1000 OS command Injection
Vulnerability Description
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33841
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Industrial Cybersecurity team of S21sec, special mention to Aarón Flecha Menéndez.
References
More from Circutor
View All →CVE-2025-64389
EXCHANGE OF SENSITIVE INFORMATION IN CLEAR TEXT
High
8.3
CVE-2025-64388
Denial of service through specific packets
Critical
9.2
CVE-2025-64387
CLICKJACKING
Medium
5.1
CVE-2025-64386
HIJACKING OF THE TOKEN AND GAINING ACCESS
High
7.7
CVE-2025-64385
INCORRECT SECURITY VALIDATION IN SENDING UDP FRAMES
Critical
9.2
Affected Vendor
Circutor
View all reports →Affected Software
SGE-PLC1000
Vulnerable Versions:
0.9.2b
Timeline
Official Publish:
June 9th, 2021
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H