CVE-2021-3707

MEDIUM

D-Link router DSL-2750U <vME1.16 - RCE

Title source: llm
STIX 2.1

Description

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device.

Exploits (1)

nomisec WORKING POC 21 stars
by HadiMed · poc
https://github.com/HadiMed/DSL-2750U-Full-chain

Scores

CVSS v3 5.5
EPSS 0.0381
EPSS Percentile 88.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-15
Status published
Products (1)
dlink/dsl-2750u_firmware < 1.16
Published Aug 16, 2021
Tracked Since Feb 18, 2026