CVE-2021-3708

2021-08-1604:55:13

CWE-78

jpcert

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.

CNA Affected

[
  {
    "product": "DSL-2750U",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "firmware vME1.16 or prior versions"
      }
    ]
  }
]