CVE-2021-45382

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-820l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dlink:dir-820lw_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-820lw:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dlink:dir-826l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dlink:dir-830l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dlink:dir-836l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dlink:dir-810l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*

Information

Published : 2022-02-17 13:15

Updated : 2022-02-25 13:25


NVD link : CVE-2021-45382

Mitre link : CVE-2021-45382


JSON object : View

CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Advertisement

dedicated server usa

Products Affected

dlink

  • dir-810l
  • dir-830l_firmware
  • dir-830l
  • dir-836l
  • dir-820l
  • dir-826l_firmware
  • dir-836l_firmware
  • dir-826l
  • dir-820lw
  • dir-810l_firmware
  • dir-820l_firmware
  • dir-820lw_firmware