VULNERABILITY INTELLIGENCE

CVE-2021-3708

CVSS score7.8 HIGH
EPSS probability24.56%
CISA KEVNot currently listed
Published2021-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.

Weakness classification

  • vultures@jpcert.or.jp: CWE-78
  • nvd@nist.gov: CWE-78

Primary references