CVE-2021-3708CWE-78

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection

published August 16, 2021

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24563 · 97.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-08-16T04:55Z
EPSS history
Timeline
  • 16 AUG 04:55Z
    D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection
    cvelistv5