PT-2021-14794

CVE-2021-21818

·

Published

2021-07-16

·

Updated

2022-07-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03
Description A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality. This issue can be triggered by a specially crafted network request, potentially leading to a denial of service. An attacker can exploit this by sending a sequence of requests.
Recommendations For D-LINK DIR-3040 version 1.13B03, consider changing the hard-coded password in the Zebra IP Routing Manager functionality to prevent exploitation. As a temporary workaround, restrict access to the Zebra IP Routing Manager to minimize the risk of denial of service attacks.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾