Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-36380: Sunhillo SureLine can be tricked to run unwanted commands
CVE-2021-36380 · published 5 years ago · actively exploited
Summary
The SureLine system lets an attacker insert special characters into network‑diagnosis fields (ipAddr or dnsAddr). This can make the device crash or be used to keep a foothold on your network. Apply the vendor’s update or restrict access to the CGI page to stop this risk.
What to do
- Update sunhillo sureline to version 8.7.0.1.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sunhillo | sureline | < 8.7.0.1.1 |
Original advisory text
Sunhillo SureLine OS Command Injection Vulnerablity
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi.
References
- https://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-un... Exploit Third Party Advisory
- https://www.sunhillo.com/product/sureline/ Product
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-... US Government Resource
Internet-facing
3 days
and check for signs of compromise
Internal
3 days
and check for signs of compromise
- Known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
98%
chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published13 Aug 2021
Updated14 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta