CVE-2021-21818
Quick assessment
Affected
n/a D-Link
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
D-Link D-LINK DIR-3040是中国台湾友讯（D-Link）公司的一个路由器。提供连接网络的功能。 D-LINK DIR-3040 中存在信任管理问题漏洞，该漏洞源于产品的 Zebra IP Routing Manager 功能。D-LINK DIR-3040 1.13B03的Zebra IP Routing Manager功能中缺乏有效的信任管理机制，攻击者可通过特殊的请求导致目标拒绝服务。以下产品及版本受到影响：D-LINK DIR-3040 1.13B03。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-21818
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的口令
Source: CVE Program / CVE List V5
Vulnerability Title
D-Link D-LINK DIR-3040 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
D-Link D-LINK DIR-3040是中国台湾友讯（D-Link）公司的一个路由器。提供连接网络的功能。 D-LINK DIR-3040 中存在信任管理问题漏洞，该漏洞源于产品的 Zebra IP Routing Manager 功能。D-LINK DIR-3040 1.13B03的Zebra IP Routing Manager功能中缺乏有效的信任管理机制，攻击者可通过特殊的请求导致目标拒绝服务。以下产品及版本受到影响：D-LINK DIR-3040 1.13B03。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | D-Link | D-LINK DIR-3040 1.13B03 | - |
|
II. Public POCs for CVE-2021-21818
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21818
请登录查看更多情报信息。
Other References for CVE-2021-21818 (1)
-
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1283 x_refsource_MISC
Same Patch Batch · n/a · 2021-07-16 · 15 CVEs total
| CVE-2021-36769 | Telegram 加密问题漏洞 | |
| CVE-2021-28053 | Centreon SQL注入漏洞 | |
| CVE-2021-28054 | Centreon 跨站脚本漏洞 | |
| CVE-2021-28114 | Froala WYSIWYG Editor 跨站脚本漏洞 | |
| CVE-2021-21803 | Advantech R-SeeNet 跨站脚本漏洞 | |
| CVE-2021-21802 | Advantech R-SeeNet 跨站脚本漏洞 | |
| CVE-2021-21801 | Advantech R-SeeNet 跨站脚本漏洞 | |
| CVE-2021-21804 | Advantech R-SeeNet 安全漏洞 | |
| CVE-2021-21800 | Advantech R-SeeNet 跨站脚本漏洞 | |
| CVE-2021-21799 | Advantech R-SeeNet 跨站脚本漏洞 | |
| CVE-2021-21816 | D-LINK DIR-3040 信息泄露漏洞 | |
| CVE-2021-21817 | D-LINK DIR-3040 信息泄露漏洞 | |
| CVE-2021-21819 | D-LINK DIR-3040 操作系统命令注入漏洞 | |
| CVE-2021-21820 | D-LINK DIR-3040 信任管理问题漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-103531
OpenSC card-setcos.c setcos_construct_fci_44 stack-based ove -
CVE-2026-103227
GPAC DASH Client dash_client.c gf_dash_resolve_url buffer ov -
CVE-2026-103118
GraphicsMagick WPG File wpg.c ExtractPostscript recursion -
CVE-2026-51870
DeepTutor v1.4.0 命令执行漏洞 -
CVE-2026-51858
camel-ai 0.2.91a3 shell_exec命令执行漏洞
Same weakness: CWE-259
V. Comments for CVE-2021-21818
No comments yet