Actively exploited · Published Sep 24, 2021 · Assigned by mitre
CVE-2021-40655
High 7.5 Exploited
In plain English
A high-severity incorrect authorization in DIR-605 Router from D-Link. Attackers are actively exploiting it in the wild (listed by CISA on May 16, 2024). The chance it is exploited in the next 30 days is estimated at 87.0% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
CISA guidance
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Federal agencies must remediate by Jun 6, 2024.
Official description
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page
Affected products (as reported)
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.dlink.com/en/security-bulletin/ x_refsource_MISC
- https://github.com/Ilovewomen/D-LINK-DIR-605/ x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40655 government-resource