CVE-2021-31166
KEVCRITICAL 9.8EPSS 99.8%
HTTP Protocol Stack Remote Code Execution Vulnerability
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 99.77% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-04-06
- Published
- 2021-05-11
- Updated
- 2025-10-21
Proof-of-concept exploits (16)
- 0vercl0k/CVE-2021-31166827★ · 2021-06-12
- 0xmaximus/Home-Demolisher8★ · 2022-12-08
- ConMiko/CVE-2021-31166-exploit2★ · 2021-10-20
- ZZ-SOCMAP/CVE-2021-3116619★ · 2021-11-04
- antx-code/CVE-2021-3116619★ · 2021-11-04
- bgsilvait/WIn-CVE-2021-311660★ · 2021-05-23
- corelight/CVE-2021-3116612★ · 2024-10-17
- imiko0u0/CVE-2021-31166-exploit2★ · 2021-10-20
- imikoYa/CVE-2021-31166-exploit2★ · 2021-10-20
- liang2kl/iot-exploits3★ · 2023-07-26
- mauricelambert/CVE-2021-311666★ · 2022-03-16
- mauricelambert/CVE-2022-479861★ · 2023-03-09
- y0g3sh-99/CVE-2021-31166-Exploit7★ · 2021-07-03
- zecopro/CVE-2021-311665★ · 2021-05-19
- zha0gongz1/CVE-2021-311669★ · 2021-05-17
- iranzai/CVE-2021-31166-exploit