CVE-2021-3708: D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may…

high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
d-link	dsl-2750u	—	—
dlink	dsl-2750u_firmware	<= 1.16	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vulncheck5.5MEDIUM