CVE-2021-36380criticalunder attackCWE-78

CVE-2021-36380

Published · Updated

Follow this CVE+ Monitor SureLine

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

95Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 98%
from disclosure to weapon
Published on NVDAug 13
CISA KEV+935d
Action required by CISAfederal deadline: 2024-03-26

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

Sunhillo SureLine devices before version 8.7.0.1.1 allow anyone to run arbitrary system commands on the device through a network diagnostic tool, without needing to log in. An attacker can exploit this by inserting special characters into network settings to execute malicious commands.

Technical detail

The /cgi/networkDiag.cgi endpoint in Sunhillo SureLine before 8.7.0.1.1 fails to sanitize the ipAddr and dnsAddr parameters, enabling unauthenticated OS command injection via shell metacharacters (CWE-78). An attacker can craft a malicious request with embedded shell commands to achieve remote code execution with device privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a