CVE-2021-26777: Circutor Compact DC-S Basic Firmware

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIR_CDC_v1.2.17, allows attackers to execute arbitrary code.

Affected products

• Circutor Compact DC-S Basic Firmware: version 1.2.17 only

Published 2021-12-02. Last modified 2026-06-17.