Actively exploited · Published Aug 13, 2021 · Assigned by mitre

CVE-2021-36380

Critical 9.8 Exploited

In plain English

A critical-severity OS command injection in SureLine from Sunhillo. Attackers are actively exploiting it in the wild (listed by CISA on March 5, 2024). The chance it is exploited in the next 30 days is estimated at 97.8% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)97.8%top 0.1% of all CVEs

Exploited in the wildYesCISA KEV since Mar 5, 2024

Attack tooling1Nuclei

CISA guidance

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Mar 26, 2024.

Official description

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.sunhillo.com/product/sureline/ x_refsource_MISC
https://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380/ x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36380 government-resource