CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21816

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-21816

CVE-2021-21816 affects D-Link DIR-3040 (firmware 1.13B03) via the Syslog functionality. A specially crafted HTTP request can trigger an information disclosure, potentially exposing sensitive information and, in the nuclei template, may allow access to user accounts and alteration/unauthorized ope...

CVE-2021-21817

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21817

CVE-2021-21817 affects D-LINK DIR-3040, specifically the Zebra IP Routing Manager running by default on TCP port 2601. TALOS-2021-1282 documents an information disclosure vulnerability where an unauthenticated attacker can issue crafted network requests to trigger exposure of sensitive data. The ...

CVE-2021-21818

The provided connected document TALOS-2021-1283 details a vulnerability in D-LINK DIR-3040 (1.13B03) where the Zebra IP Routing Manager exposes a hard-coded password. The Zebra service runs by default on TCP port 2601 and can be accessed remotely, with a configuration file containing the password...

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21819

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21819

CVE-2021-21819 affects the D-LINK DIR-3040 1.13B03. The vulnerability lies in the Libcli Test Environment functionality where unsanitized arguments in commands can lead to arbitrary command execution via a specially crafted network request. Public writeups (TALOS-2021-1361) detail a related infor...

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21820

TALOS-2021-1361 details a hard-coded credential and information-disclosure/remote-command-execution vulnerability in D-LINK DIR-3040 (1.13B03) within the WiFi Smart Mesh MQTT service. A specially crafted network packet to the MQTT service can trigger command execution, potentially compromising th...

D-LINK DIR-3040 Command Injection Vulnerability

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...

D-LINK DIR-3040 Information Disclosure Vulnerability

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

D-Link D-LINK DIR-3040 信任管理问题漏洞

D-LINK DIR-3040 is a router from D-Link, Taiwan, China. A trust management issue vulnerability exists in the D-LINK DIR-3040, which stems from the product's Zebra IP Routing Manager feature.The lack of an effective trust management mechanism in the Zebra IP Routing Manager feature of the D-LINK...

PT-2021-14792 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-3040 version 1.13B03 Description: An information disclosure issue exists in the Syslog functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to...

Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR-3040

Dave McDaniel discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the D-LINK DIR-3040 wireless router. The DIR-3040 is an AC3000-based wireless internet router. These vulnerabilities could allow an attacker to carry out a... This is...

D-LINK DIR-3040 信息泄露漏洞

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

D-LINK DIR-3040 Syslog information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1283 D-LINK DIR-3040 Syslog information disclosure vulnerability July 15, 2021 CVE Number CVE-2021-21818 Summary A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network...

D-LINK DIR-3040 信任管理问题漏洞

The D-Link DIR-3040 is a router from AUO D-Link of Taiwan, China. It provides the function of connecting to a network. A trust management issue vulnerability exists in Libcli for D-LINK DIR-3040 1.13B03, which stems from a specially designed network request can lead to code execution. No detailed...