← All advisories

Critical severity9.8CISA KEVNVD Advisory· Published Aug 13, 2021· Updated Jun 17, 2026

CVE-2021-36380

CVE-2021-36380

Description

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sunhillo/SureLine2 versions
cpe:2.3:a:sunhillo:sureline:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sunhillo:sureline:*:*:*:*:*:*:*:*range: <8.7.0.1.1
- (no CPE)range: <8.7.0.1.1
Sunhillo/SureLinedescription

Patches

Vulnerability mechanics

References

3

research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380/nvdExploitThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
www.sunhillo.com/product/sureline/nvdProduct

News mentions

0

No linked articles in our index yet.