CVE-2021-38306
Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.
Date published : 2021-08-24
https://www.lg.com/uk/support/product/lg-N1T1DD1
https://www.lg.com/us/burners-drives/lg-N1T1-network-attached-storage