PT-2022-11636 · D Link · Dir-615

Sanjok Karki · Published 2022-08-23 · Updated 2023-04-26 · CVE-2021-42627

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 version 20.06

Description The issue allows unauthorized access to the WAN configuration page "wan.htm" without authentication, potentially disclosing WAN settings information and enabling attackers to modify data fields on the page.

Recommendations For version 20.06, consider restricting access to the "wan.htm" page until a patch is available. As a temporary workaround, limit access to the device's configuration interface to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2021-42627

Affected Products

Dir-615

References · 6

• 🔥 https://github.com/sanjokkarki/D-Link-DIR-615/blob/main/CVE-2021-42627 · Exploit
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42627 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42627 · Vendor Advisory
• http://d-link.com · Note
• http://dlink.com · Note