CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
exploit remote code execution code execution
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2021-38703
Severity
HIGH
CVSS
8.8
EPSS
4.32%
Original NVD Description
Wireless devices running certain Arcadyan-derived firmware (such as KPN Experia WiFi 1.00.15) do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be exploited in conjunction with CVE-2021-20090.