PT-2021-20121 · D Link · D-Link Dsl-2888A

Published 2021-06-24 · Updated 2022-07-12 · CVE-2021-33346

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions D-LINK DSL-2888A router (affected versions not specified)

Description The issue concerns an arbitrary password modification vulnerability. An attacker can exploit this to modify the admin user's password without authorization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-33346

Affected Products

D-Link Dsl-2888A

References · 3

• 🔥❌ https://github.com/EmYiQing/CVE · Exploit, Deleted
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33346 · Security Note