CVE-2021-21819

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21819

CVE-2021-21819 affects the D-LINK DIR-3040 1.13B03. The vulnerability lies in the Libcli Test Environment functionality where unsanitized arguments in commands can lead to arbitrary command execution via a specially crafted network request. Public writeups (TALOS-2021-1361) detail a related infor...

CVE-2021-21820

TALOS-2021-1361 details a hard-coded credential and information-disclosure/remote-command-execution vulnerability in D-LINK DIR-3040 (1.13B03) within the WiFi Smart Mesh MQTT service. A specially crafted network packet to the MQTT service can trigger command execution, potentially compromising th...

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2021-14795

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A code execution issue exists in the Libcli Test Environment functionality. It can be triggered by a specially crafted network request, leading to arbitrary command execution. An attacker can exploit...

CVE-2021-21820: Use of Hard-coded Credentials

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2021-14792 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-3040 version 1.13B03 Description: An information disclosure issue exists in the Syslog functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to...

D-LINK DIR-3040 Information Disclosure Vulnerability

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

CVE-2021-21817: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability...

D-Link D-LINK DIR-3040 信任管理问题漏洞

D-LINK DIR-3040 is a router from D-Link, Taiwan, China. A trust management issue vulnerability exists in the D-LINK DIR-3040, which stems from the product's Zebra IP Routing Manager feature.The lack of an effective trust management mechanism in the Zebra IP Routing Manager feature of the D-LINK...

D-LINK DIR-3040 Command Injection Vulnerability

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...

PT-2021-14796

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A hard-coded password vulnerability exists in the Libcli Test Environment functionality. This issue can be triggered by a specially crafted network request, potentially leading to code execution. An...

PT-2021-14794

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality. This issue can be triggered by a specially crafted network request, potentially leading to a denial of servic...

CVE-2021-21816: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

PT-2021-14793

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description An information disclosure issue exists in the Zebra IP Routing Manager functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a...

CVE-2021-21818: Use of Hard-coded Password

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21819: Improper Neutralization of Special Elements used in an OS Command

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR-3040

Dave McDaniel discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the D-LINK DIR-3040 wireless router. The DIR-3040 is an AC3000-based wireless internet router. These vulnerabilities could allow an attacker to carry out a... This is...

D-LINK DIR-3040 信息泄露漏洞

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

D-LINK DIR-3040 操作系统命令注入漏洞

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...