CVE-2021-21817

PoC —

CVSS 3.1

7.5 high

EPSS

2%p80

Published

Jul 16, 2021 (Jul 16, 2021)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.

Vendors: dlink
Products: dir-3040 firmware
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news2 stories

Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR

Cisco TalosJul 15, 19:58 UTC · Jul 15, 2021Vulnerability in the wildCVE-2021-21816 CVE-2021-21817 CVE-2021-21818+2 CVEs

D-Link issues beta hotfix for multiple flaws in DIR

Security AffairsJul 17, 08:47 UTC · Jul 17, 2021Vulnerability CVE-2021-21816 CVE-2021-21817 CVE-2021-21818+2 CVEs