QwikSec

Security Database

CVE

CWE

Training

CVE-2021-47854

Published: Jan 21, 2026

Modified: Jan 22, 2026

PUBLISHED

CVSS v3.1

9.8

CRITICAL

Description

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.

Vendor	Product	Versions
embeDD GmbH	DD-WRT	affected `45723`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

ExploitDB-49730

exploit

DD-WRT Official Vendor Homepage

product

DD-WRT Software Download Repository

product

SSD Security Advisory for DD-WRT UPNP Buffer Overflow

technical-description

VulnCheck Advisory: DD-WRT 45723 - UPNP Buffer Overflow

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.