CVE-2021-47854: Embedd GmbH DD-WRT

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.

Affected products

Published 2026-01-21. Last modified 2026-06-17.