What is CVE-2021-38703?

CVE-2021-38703 is a high-severity vulnerability in Kpn Experia Wifi. CVSS score: 8.8/10. Published 2021-09-01.

How severe is CVE-2021-38703?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Kpn Experia Wifi

CVE-2021-38703

Wireless devices running certain Arcadyan-derived firmware (such as KPN Experia WiFi 1.00.15) do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be exploited in conjunction with CVE-2021-20090.

EPSS: 0.043 (90.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Kpn Experia_wifi
Kpn Experia_wifi_firmware — versions 1.00.15
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-38703?: CVE-2021-38703 is a high-severity vulnerability in Kpn Experia Wifi. CVSS score: 8.8/10. Published 2021-09-01.
How severe is CVE-2021-38703?: High severity. CVSS v3 base score is 8.8 out of 10.