Skip to main content

Dsl 2750U Firmware CVE-2021-3707

MEDIUM
External Control of System or Configuration Setting (CWE-15)
2021-08-16 vultures@jpcert.or.jp
D-Link Authentication Bypass Dsl 2750U Firmware
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 16, 2021 - 05:15 nvd
MEDIUM 5.5

DescriptionNVD

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device.

AnalysisAI

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-15. D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device. Affected products include: Dlink Dsl-2750U Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Dsl 2750U Firmware

View all
CVE-2019-1010155 CRITICAL POC
9.1 Jul 23

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. Rated critical severity (CVSS 9.1), this vulnerability is r
CVE-2024-0717 MEDIUM POC
5.3 Jan 19

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DI
CVE-2021-3708 HIGH
7.8 Aug 16

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. Rated high severi
CVE-2020-13150 HIGH
7.8 Jun 15

D-link DSL-2750U ISL2750UEME3.V1E devices allow approximately 90 seconds of access to the control panel, after a restart
CVE-2023-46033 MEDIUM
6.8 Oct 19

D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. Rat
CVE-2024-9792 MEDIUM
5.1 Oct 10

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. Rated medium severity (CVSS 5.1), t

Same weakness CWE-15 – External Control of System or Configuration Setting

View all
CVE-2026-45087 CRITICAL POC
10.0
CVE-2024-4326 CRITICAL POC
9.8
CVE-2023-50252 CRITICAL POC
9.8
CVE-2023-46248 HIGH POC
8.8
CVE-2023-43323 MEDIUM POC
6.5
CVE-2026-22708 CRITICAL
9.8
CVE-2026-46399 CRITICAL
9.4
CVE-2021-38453 CRITICAL
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2021-3707 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy