CVE-2021-47747

HIGH 8.8

meterN 1.2.3 Authenticated Remote Code Execution via Admin Scripts

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

meterN 1.2.3 contains an authenticated remote code execution vulnerability in admin_meter2.php and admin_indicator2.php scripts. Attackers can exploit the 'COMMANDx' and 'LIVECOMMANDx' POST parameters to execute arbitrary system commands with administrative privileges.

CWE	CWE-78
Vendor	metern
Product	metern
Published	Dec 31, 2025
Last Updated	Apr 7, 2026

Stay Ahead of the Next One

Get instant alerts for metern metern

Be the first to know when new high vulnerabilities affecting metern metern are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Metern / meterN

1.2.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

exploit-db.com: https://www.exploit-db.com/exploits/50596 web.archive.org: https://web.archive.org/web/20210617084455/https://www.metern.org/ zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5690.php vulncheck.com: https://www.vulncheck.com/advisories/metern-authenticated-remote-code-execution-via-admin-scripts

Credits

LiquidWorm as Gjoko Krstic of Zero Science Lab