VULNERABILITY INTELLIGENCE
CVE-2021-47854
CVSS score9.8 CRITICAL
EPSS probability1.08%
CISA KEVNot currently listed
Published2026-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.
Weakness classification
- disclosure@vulncheck.com: CWE-120