CVE-2021-36380: Sunhillo SureLine OS Command Injection Vulnerablity

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-03-05. EPSS: 97.6% chance of exploitation in the next 30 days.

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

Affected products

• Sunhillo SureLine: before 8.7.0.1.1 (fixed in 8.7.0.1.1)

Published 2021-08-13. Last modified 2026-06-17.