CVE-2021-3707 PoC — D-Link DSL-2750U安全漏洞

Source

https://github.com/HadiMed/DSL-2750U-Full-chain

Associated Vulnerability

Title: D-Link DSL-2750U安全漏洞 (CVE-2021-3707)
Description:D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device.

Description

CVE-2021-3707 , CVE-2021-3708

Readme

### firmware-analysis
1. DSL-2750U Bugs : 
 - misconfiguration of tftp server  (CVE-2021-3707)
 - command injection bug  (CVE-2021-3708)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →