9.8

CVE-2021-42627

EPSS 49.71%
Published 23.08.2022 12:15:08
Last modified 21.11.2024 06:27:52
Source cve@mitre.org
Teams watchlist Login
Open Login

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Dlink ≫ Dir-615 Firmware Version20.06

Dlink ≫ Dir-615 Version-

Dlink ≫ Dir-615 J1 Firmware Version20.06

Dlink ≫ Dir-615 J1 Version-

Dlink ≫ Dir-615 T1 Firmware Version20.06

Dlink ≫ Dir-615 T1 Version-

Dlink ≫ Dir-615jx10 Firmware Version20.06

Dlink ≫ Dir-615jx10 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	49.71%	0.978

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

https://www.dlink.com/en/security-bulletin/

Vendor Advisory

http://d-link.com

Broken Link

http://dlink.com

Product

https://github.com/sanjokkarki/D-Link-DIR-615/blob/main/CVE-2021-42627

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-42627

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-42627

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-42627

EUVD