CVE-2021-21817

🗓️ 16 Jul 2021 10:24:30Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 75 Views🌐 WEB

An information disclosure vulnerability in D-LINK DIR-3040 1.13B03 allows disclosure of sensitive information via crafted network requests

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-21817	18 Jul 202105:01	–	circl
CNNVD	D-LINK DIR-3040 信息泄露漏洞	15 Jul 202100:00	–	cnnvd
CNVD	D-LINK DIR-3040 Information Disclosure Vulnerability	16 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-21817	16 Jul 202110:24	–	cvelist
EUVD	EUVD-2021-8988	3 Oct 202520:07	–	euvd
NVD	CVE-2021-21817	16 Jul 202111:15	–	nvd
OpenVAS	D-Link DIR-3040 < 1.13B03 Hotfix Multiple Vulnerabilities - Active Check	3 Aug 202100:00	–	openvas
Prion	Information disclosure	16 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-21817	22 May 202521:30	–	redhatcve
seebug.org	D-LINK DIR-3040 Zebra IP 路由管理器信息泄露漏洞(CVE-2021-21817)	22 Jul 202100:00	–	seebug

NVD

Vulners

Node

dlink dir-3040_firmwareMatch1.13b03

AND

dlink dir-3040Match-

[
  {
    "product": "D-Link",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "D-LINK DIR-3040 1.13B03"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2021-1282

Parameter	Position	Path	Description	CWE
banner motd file	nested	192.168.100.1:2601	Information disclosure via Zebra IP Routing Manager allowing reading arbitrary file contents via banner motd file command.	CWE-200
/etc/passwd	nested	192.168.100.1:2601	Information disclosure via Zebra IP Routing Manager allowing reading arbitrary file contents via banner motd file command.	CWE-200

21 Nov 2024 05:49Current

7High risk

Vulners AI Score7

CVSS 25

CVSS 3.17.5

CVSS 37.5

EPSS0.01918

CWE-200