PT-2021-6123 · D Link · D-Link Dir-X1860

Constantinos Kolias + 2 · Published 2021-09-01 · Updated 2024-02-14 · CVE-2021-41441

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to v1.10WWB09 Beta

Description The issue is related to a DoS attack in the web application, allowing a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated victim, who must visit the URL for the reboot to occur. This is also associated with resource release errors in the Wi-Fi router's firmware, which can be exploited by a remote attacker using a specially crafted web page to cause a denial of service.

Recommendations For D-Link DIR-X1860 versions prior to v1.10WWB09 Beta, update to version v1.10WWB09 Beta or later to resolve the issue. As a temporary workaround, consider restricting access to the web application to minimize the risk of exploitation. Avoid using the router's web interface from untrusted networks until the issue is resolved.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-00873

CVE-2021-41441

Affected Products

D-Link Dir-X1860

References · 7

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283 · Vendor Advisory
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41441 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41441 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00873 · Security Note
• http://dir-x1860.com · Note
• http://d-link.com · Note