Sunhillo SureLine OS Command Injection Vulnerablity

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2021-36380 · Published 13/08/2021 · updated 17/06/2026

Sunhillo SureLine OS Command Injection Vulnerablity. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/03/2024. Patch affected systems as an emergency.

In short

CVE-2021-36380 is a CRITICAL (CVSS 9.8) vulnerability affecting sureline (sunhillo).
Exploited in the wild: CISA added it to the KEV catalog on 05/03/2024.
Chance of exploitation in the next 30 days (EPSS): 97.8%, higher than 99.9% of all vulnerabilities.
Fix: update to 8.7.0.1.1 or later.

Package	Affected versions	Patched versions
sureline sunhillo	`< 8.7.0.1.1`	`8.7.0.1.1`

Description

Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

References

research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380 · Exploit
sunhillo.com/product/sureline · Product
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-36380

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free