CVE-2021-36380

2021-08-1315:53:59

mitre

github.com

sunhillo

sureline

unauthenticated

os command injection

shell metacharacters

ipaddr

dnsaddr

networkdiag

AI Score

7.5

Confidence

Low

EPSS

0.975

Percentile

100.0%

SSVC

Exploitation

Active

Automatable

Yes

Technical Impact

Total

JSON

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sunhillo:sureline:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sunhillo",
    "product": "sureline",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.7.0.1.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]