Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-94841
HistoryAug 13, 2021 - 12:00 a.m.

Multiple D-Link products null pointer dereference vulnerability (CNVD-2021-94841)

2021-08-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
d-link
vulnerability
null pointer.

EPSS

0.002

Percentile

54.8%

The D-Link DAP-2310 is a single-band wireless network access point for small businesses or schools that need a fast and reliable wireless network. the D-Link DAP-2330 is a wireless N300 single-band PoE access point. Multiple D-Link products are vulnerable to a null pointer dereference vulnerability, which stems from the fact that strrchr in the upload_certificate function takes NULL as the first parameter when the binary processes a specific HTTP GET request. An attacker could exploit the vulnerability to cause the program to crash.

EPSS

0.002

Percentile

54.8%

Related for CNVD-2021-94841