CVE-2021-34546

CVE-2021-34546 describes a vulnerability in NetSetMan Pro versions prior to 5.0, where an unauthenticated attacker with physical access can gain an administrative shell and execute arbitrary commands as SYSTEM. This is achieved by exploiting the "save log to file" feature accessible via the pre-logon profile switch button on the Windows logon screen. The vulnerability has a CVSS score of 6.8 (Medium), indicating high impact on confidentiality, integrity, and availability with low attack complexity, but requires physical access. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.