CVEvulnerability

CVE-2021-42627

9.8 CRITICAL Published 2022-08-23 Modified 2026-07-09 Official page ↗

Status: Modified
Published: 2022-08-23
Last modified: 2026-07-09
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

Affected configurations

• dlink dir-615 firmware 20.06 • dlink dir-615 j1 firmware 20.06 • dlink dir-615 t1 firmware 20.06 • dlink dir-615jx10 firmware 20.06

References

https://github.com/sanjokkarki/D-Link-DIR-615/blob/main/CVE-2021-42627 Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory
https://github.com/sanjokkarki/D-Link-DIR-615/blob/main/CVE-2021-42627 Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Vendor Advisory