CVE-2021-28838

🗓️ 10 Aug 2021 17:23:52Reported by mitreType

Null pointer dereference vulnerability in D-Link DAP-2310, 2330, 2360, 2553, 2660, 2690, 2695, 3320, 3662 in the sbin/httpd binary. Crash occurs at 'atoi' operation with specific network package

Reporter	Title	Published	Views	Family All 7
CNNVD	D-Link DAP-2310和DAP-2330 代码问题漏洞	10 Aug 202100:00	–	cnnvd
CNVD	Null Pointer Dereference Vulnerability in Multiple D-Link Products (CNVD-2021-94840)	13 Aug 202100:00	–	cnvd
Cvelist	CVE-2021-28838	10 Aug 202117:23	–	cvelist
EUVD	EUVD-2021-15492	7 Oct 202500:30	–	euvd
NVD	CVE-2021-28838	10 Aug 202118:15	–	nvd
Prion	Null pointer dereference	10 Aug 202118:15	–	prion
RedhatCVE	CVE-2021-28838	9 Jan 202611:25	–	redhatcve

NVD

Node

dlink dap-2310_firmwareRange≤2.10rc039

AND

dlink dap-2310Match-

Node

dlink dap-2330_firmwareRange<1.10rc036

dlink dap-2330_firmwareMatch1.10rc036beta

AND

dlink dap-2330Match-

Node

dlink dap-2360_firmwareRange≤2.10rc055

AND

dlink dap-2360Match-

Node

dlink dap-2553_firmwareRange<3.10rc039

dlink dap-2553_firmwareMatch3.10rc039beta

AND

dlink dap-2553Match-

Node

dlink dap-2660_firmwareRange≤1.15rc131b

AND

dlink dap-2660Match-

Node

dlink dap-2690_firmwareRange<3.20rc115

dlink dap-2690_firmwareMatch3.20rc115beta

AND

dlink dap-2690Match-

Node

dlink dap-2695_firmwareRange≤1.20rc093

AND

dlink dap-2695Match-

Node

dlink dap-3320_firmwareRange<1.05rc027

dlink dap-3320_firmwareMatch1.05rc027beta

AND

dlink dap-3320Match-

Node

dlink dap-3662_firmwareRange<1.05rc069

dlink dap-3662_firmwareMatch1.05rc069beta

AND

dlink dap-3662Match-

Source	Link
github	www.github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf
github	www.github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf
dlink	www.dlink.com/en/security-bulletin/

21 Nov 2024 06:00Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.01044

CWE-476