CVE-2021-45382

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-820l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dlink:dir-820lw_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-820lw:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dlink:dir-826l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dlink:dir-830l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dlink:dir-836l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dlink:dir-810l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*

History

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-77 CWE-78

Information

Published : 2022-02-17 21:15

Updated : 2024-02-28 19:09


NVD link : CVE-2021-45382

Mitre link : CVE-2021-45382

CVE.ORG link : CVE-2021-45382


JSON object : View

Products Affected

dlink

  • dir-820lw_firmware
  • dir-836l_firmware
  • dir-836l
  • dir-820l_firmware
  • dir-810l_firmware
  • dir-820l
  • dir-830l_firmware
  • dir-826l_firmware
  • dir-820lw
  • dir-826l
  • dir-810l
  • dir-830l
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')