#1
DD-WRT DD-WRT: DD-WRT Stack-Based Buffer Overflow Vulnerability (CVE-2021-27137)

DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability.

Key facts
  • CVEs: CVE-2021-27137
  • Exploited in the wild
  • Listed in the CISA KEV catalog

Source: CISA