Code Execution Vulnerability in D-LINK DIR-3040 Router
CVE-2021-21819

9.1CRITICAL

Key Information:

Vendor
D-Link
Status
D-link
Vendor
CVE Published:
16 July 2021

Summary

A code execution vulnerability has been identified in the Libcli Test Environment feature of the D-LINK DIR-3040 router version 1.13B03. This flaw allows attackers to execute arbitrary commands by sending specially crafted network requests. When exploited, this vulnerability could provide an attacker with elevated privileges, potentially compromising the device's integrity and the network it manages.

Affected Version(s)

D-Link D-LINK DIR-3040 1.13B03

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.