CVE-2021-3708observed exploitationCWE-78

CVE-2021-3708: vulnerability in D-Link DSL-2750U

Published · Updated

Follow this CVE+ Monitor DSL-2750U

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

30Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 25%
from disclosure to weapon
Published on NVDAug 16
VulnCheck+855d
D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.
Affected products
D-Link · DSL-2750U
Related CVEs — D-Link DSL-2750U

In the same product, most dangerous first.

CVE-2024-0717MEDIUMD-Link Good Line Router v2 HTTP GET Request devinfo information disclosureEPSS 18.2%CVE-2019-1010155—CVE-2019-1010155EPSS 8.6%CVE-2021-3707—CVE-2021-3707EPSS 1.5%CVE-2025-34048HIGHD-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File ReadEPSS 0.7%CVE-2024-9792MEDIUMD-Link DSL-2750U Port Forwarding Page cross site scriptingEPSS 0.7%