{"vulnerability": "cve-2021-33216", "sightings": [{"uuid": "d32c1004-390a-4964-98cb-e6a6983e7143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvxylfh27", "content": "", "creation_timestamp": "2025-04-17T21:02:27.794617Z"}, {"uuid": "0b7338da-9127-4e71-b17a-d127fe1677a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/568", "content": "CVE-2021-33216 \uff08\u5eb7\u666e\uff09CommScope Ruckus IoT Controller 1.7.1.0  \u7121\u8b49\u8cec\u6236\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-33216_%EF%BC%88%E5%BA%B7%E6%99%AE%EF%BC%89CommScope_Ruckus_IoT_Controller_1.7.1.0_%E7%84%A1%E8%AD%89%E8%B3%AC%E6%88%B6", "creation_timestamp": "2021-06-01T02:49:47.000000Z"}, {"uuid": "08435cd1-4bf8-4aac-90c5-e124c2689fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3502", "content": "#exploit\nCVE-2021-33216:\nCommScope Ruckus IoT Controller 1.7.1 - \nUndocumented Account (PoC)\nhttps://packetstormsecurity.com/files/162848/CommScope-Ruckus-IoT-Controller-1.7.1.0-Undocumented-Account.html", "creation_timestamp": "2021-05-31T12:07:01.000000Z"}, {"uuid": "972b144b-d805-47c7-8436-25cb80fab012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "seen", "source": "https://t.me/cissp/3312", "content": "Cloud Security\nrunc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs\n(PoC for CVE-2021-30465)\nhttps://github.com/champtar/blog/blob/main/runc-symlink-CVE-2021-30465/README.md\n\nexploit\nCVE-2021-33216:\nCommScope Ruckus IoT Controller 1.7.1 - \nUndocumented Account (PoC)\nhttps://packetstormsecurity.com/files/162848/CommScope-Ruckus-IoT-Controller-1.7.1.0-Undocumented-Account.html\n\nThreat Research\n1. Abusing LNK \"Features\" for Initial Access and Persistence\nhttps://v3ded.github.io/redteam/abusing-lnk-features-for-initial-access-and-persistence\n2. Research of the HTTP/1.x, HTTP/2, HTTP/3 specifications\nhttps://sensepost.com/blog/2021/adventures-into-http2-and-http3\n\nhttps://zer1t0.gitlab.io/posts/attacking_ad\ud83d\ude1c\n\nRed Team Tactics\n1. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers\nhttps://github.com/tarunkant/Gopherus\n2. Bypassing PatchGuard\nhttps://www.godeye.club/2021/05/22/001-bypass-patchguard-pssetcreateprocessnotifyroutine.html\n]-> x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code (PoC)\nhttps://github.com/kkent030315/NoPatchGuardCallback", "creation_timestamp": "2026-09-01T17:00:49.459117Z"}, {"uuid": "686f7703-c13a-4c81-a084-6a7b1901601e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "seen", "source": "https://t.me/cissp/3312", "content": "Cloud Security\nrunc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs\n(PoC for CVE-2021-30465)\nhttps://github.com/champtar/blog/blob/main/runc-symlink-CVE-2021-30465/README.md\n\nexploit\nCVE-2021-33216:\nCommScope Ruckus IoT Controller 1.7.1 - \nUndocumented Account (PoC)\nhttps://packetstormsecurity.com/files/162848/CommScope-Ruckus-IoT-Controller-1.7.1.0-Undocumented-Account.html\n\nThreat Research\n1. Abusing LNK \"Features\" for Initial Access and Persistence\nhttps://v3ded.github.io/redteam/abusing-lnk-features-for-initial-access-and-persistence\n2. Research of the HTTP/1.x, HTTP/2, HTTP/3 specifications\nhttps://sensepost.com/blog/2021/adventures-into-http2-and-http3\n\nhttps://zer1t0.gitlab.io/posts/attacking_ad\ud83d\ude1c\n\nRed Team Tactics\n1. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers\nhttps://github.com/tarunkant/Gopherus\n2. Bypassing PatchGuard\nhttps://www.godeye.club/2021/05/22/001-bypass-patchguard-pssetcreateprocessnotifyroutine.html\n]-> x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code (PoC)\nhttps://github.com/kkent030315/NoPatchGuardCallback", "creation_timestamp": "2026-09-02T01:04:37.578324Z"}, {"uuid": "44f1184b-0c9b-4cca-b12e-6f1056a6fb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3312", "content": "Cloud Security\nrunc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs\n(PoC for CVE-2021-30465)\nhttps://github.com/champtar/blog/blob/main/runc-symlink-CVE-2021-30465/README.md\n\nexploit\nCVE-2021-33216:\nCommScope Ruckus IoT Controller 1.7.1 - \nUndocumented Account (PoC)\nhttps://packetstormsecurity.com/files/162848/CommScope-Ruckus-IoT-Controller-1.7.1.0-Undocumented-Account.html\n\nThreat Research\n1. Abusing LNK \"Features\" for Initial Access and Persistence\nhttps://v3ded.github.io/redteam/abusing-lnk-features-for-initial-access-and-persistence\n2. Research of the HTTP/1.x, HTTP/2, HTTP/3 specifications\nhttps://sensepost.com/blog/2021/adventures-into-http2-and-http3\n\nhttps://zer1t0.gitlab.io/posts/attacking_ad\ud83d\ude1c\n\nRed Team Tactics\n1. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers\nhttps://github.com/tarunkant/Gopherus\n2. Bypassing PatchGuard\nhttps://www.godeye.club/2021/05/22/001-bypass-patchguard-pssetcreateprocessnotifyroutine.html\n]-> x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code (PoC)\nhttps://github.com/kkent030315/NoPatchGuardCallback", "creation_timestamp": "2026-09-11T05:00:05.322262Z"}]}