CVE-2016-11021 — VulnIntel

CVE-2016-11021

HIGH

KEV

Exploit

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.

설명

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.

Score Summary

CVSS Score: 7.2
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 72.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 68.5%
(상위 99.3%)
Attack Vector: Network
Low Complexity
High Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CISA KEV Listing

Required Action

The impacted product is end-of-life and should be disconnected if still in use.

Vulnerability Lifecycle

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	9.0

CWE Weakness Classification

References (2)

Affected Products (2)

Impact	72.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00