d-link DIR-3040 Security Vulnerabilities

6 Vulnerabilities

Description
An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21913, Last Modified: 2021-09-23T15:15:00Z References Advisory
A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21820, Last Modified: 2021-07-16T11:15:00Z References Advisory
A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21818, Last Modified: 2021-07-16T11:15:00Z References Advisory
A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21819, Last Modified: 2021-07-16T11:15:00Z References Advisory
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21816, Last Modified: 2021-07-16T11:15:00Z References Advisory
An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2021-21817, Last Modified: 2021-07-16T11:15:00Z References Advisory

Description

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21913, Last Modified: 2021-09-23T15:15:00Z

References

Advisory

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21820, Last Modified: 2021-07-16T11:15:00Z

References

Advisory

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21818, Last Modified: 2021-07-16T11:15:00Z

References

Advisory

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21819, Last Modified: 2021-07-16T11:15:00Z

References

Advisory

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21816, Last Modified: 2021-07-16T11:15:00Z

References

Advisory

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2021-21817, Last Modified: 2021-07-16T11:15:00Z

References

Advisory

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.