CVE-2021-41445

2022-02-1016:36:36

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.5%

JSON

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.

References

d-link.com

dir-x1860.com

supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283

www.dlink.com/en/security-bulletin/