What’s Vulnerable › Vulnerabilities

CVE-2021-3304

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-26 · updated 2026-06-17
• Weakness: CWE-120

Description

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.

Affected products

• Sagemcom F@St 3686 Firmware: 3.495

References

• https://twitter.com/j0nh4t/status/1349649975479840769
• https://twitter.com/j0nh4t/status/1349649975479840769

Get alerted when CVE-2021-3304 or the next vulnerability affects your stack