CVE-2021-21818

PoC —

CVSS 3.1

7.5 high

EPSS

2%p76

Published

Jul 16, 2021 (Jul 16, 2021)

Modified

Jun 17, 2026

Description

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability.

Vendors: dlink
Products: dir-3040 firmware
Weakness: CWE-259, CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news2 stories

Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR

Cisco TalosJul 15, 19:58 UTC · Jul 15, 2021Vulnerability in the wildCVE-2021-21816 CVE-2021-21817 CVE-2021-21818+2 CVEs

D-Link issues beta hotfix for multiple flaws in DIR

Security AffairsJul 17, 08:47 UTC · Jul 17, 2021Vulnerability CVE-2021-21816 CVE-2021-21817 CVE-2021-21818+2 CVEs