CVE-2021-20697

2021-04-2600:20:43

jpcert

www.cve.org

cve-2021-20697

dap-1880ac

firmware

authentication

remote attacker

access privilege

AI Score

9.6

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors.

CNA Affected

[
  {
    "product": "DAP-1880AC",
    "vendor": "D-Link Japan K.K.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.21 and earlier"
      }
    ]
  }
]