CVE-2021-21818: Use of Hard-coded Password

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2021-14794

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality. This issue can be triggered by a specially crafted network request, potentially leading to a denial of servic...

CVE-2021-21820: Use of Hard-coded Credentials

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21816: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

D-LINK DIR-3040 Command Injection Vulnerability

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...

D-Link D-LINK DIR-3040 信任管理问题漏洞

D-LINK DIR-3040 is a router from D-Link, Taiwan, China. A trust management issue vulnerability exists in the D-LINK DIR-3040, which stems from the product's Zebra IP Routing Manager feature.The lack of an effective trust management mechanism in the Zebra IP Routing Manager feature of the D-LINK...

CVE-2021-21819: Improper Neutralization of Special Elements used in an OS Command

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2021-14793

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description An information disclosure issue exists in the Zebra IP Routing Manager functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a...

D-LINK DIR-3040 Information Disclosure Vulnerability

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

PT-2021-14795

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A code execution issue exists in the Libcli Test Environment functionality. It can be triggered by a specially crafted network request, leading to arbitrary command execution. An attacker can exploit...

PT-2021-14796

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A hard-coded password vulnerability exists in the Libcli Test Environment functionality. This issue can be triggered by a specially crafted network request, potentially leading to code execution. An...

Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR-3040

Dave McDaniel discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the D-LINK DIR-3040 wireless router. The DIR-3040 is an AC3000-based wireless internet router. These vulnerabilities could allow an attacker to carry out a... This is...

D-LINK DIR-3040 Libcli test environment hard-coded password vulnerability

Summary A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions D-LINK DIR-3040...

D-LINK DIR-3040 Zebra IP routing manager information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability. Test...

D-LINK DIR-3040 Libcli command injection vulnerability

Summary A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions D-LINK...

D-LINK DIR-3040 Syslog information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions D-LINK DIR-30...

D-LINK DIR-3040 信任管理问题漏洞

The D-Link DIR-3040 is a router from AUO D-Link of Taiwan, China. It provides the function of connecting to a network. A trust management issue vulnerability exists in Libcli for D-LINK DIR-3040 1.13B03, which stems from a specially designed network request can lead to code execution. No detailed...

D-LINK DIR-3040 信息泄露漏洞

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

D-LINK DIR-3040 操作系统命令注入漏洞

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...

D-LINK DIR-3040 Syslog information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1283 D-LINK DIR-3040 Syslog information disclosure vulnerability July 15, 2021 CVE Number CVE-2021-21818 Summary A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network...