CVE-2021-40655
HighActively exploited (CISA KEV)
Description
An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page
SeverityHigh
CVSS7.5
Exploit probability—
Product
D-Link DIR-605 Router
PublishedSep 24, 2021
First seenSep 24, 2021
Added to KEVMay 16, 2024
Weakness typeCWE-863Incorrect authorization
How to fix
CISA required action
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
CISA due date: Jun 6, 2024Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-605l_firmware | 2.01mt | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.