CVE-2021-36380 is a critical unauthenticated OS command injection vulnerability affecting Sunhillo SureLine devices prior to version 8.7.0.1.1. This flaw allows attackers to execute arbitrary operating system commands by injecting shell metacharacters into the ipAddr or dnsAddr parameters within the /cgi/networkDiag.cgi endpoint. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network without authentication, leading to complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as confirmed by its presence in the CISA KEV catalog and mentions in media coverage related to Mirai DDoS malware. While no Metasploit or ExploitDB modules exist, Nuclei templates are available, and the vulnerability has garnered significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 8.7.0.1.1CPE matchmatch criteria | cpe:2.3:a:sunhillo:sureline:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.