Hard-Coded Password Vulnerability in D-Link DIR-3040
CVE-2021-21818

7.5HIGH

Key Information:

Vendor
D-Link
Status
D-link
Vendor
CVE Published:
16 July 2021

Summary

A hard-coded password vulnerability is present in the IP Routing Manager functionality of the D-Link DIR-3040. This issue allows an attacker to exploit the system by sending specially crafted network requests, potentially leading to a denial of service. The vulnerability highlights significant risks associated with hard-coded credentials in network management systems, enabling unauthorized access and disruption of services.

Affected Version(s)

D-Link D-LINK DIR-3040 1.13B03

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.