CVE-2021-46381

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dap-1620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-1620:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:34

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/167070/DLINK-DAP-1620-A1-1.01-Directory-Traversal.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/167070/DLINK-DAP-1620-A1-1.01-Directory-Traversal.html - Exploit, Third Party Advisory, VDB Entry
References () https://drive.google.com/drive/folders/19OP09msw8l7CJ622nkvnvnt7EKun1eCG?usp=sharing - Exploit, Third Party Advisory () https://drive.google.com/drive/folders/19OP09msw8l7CJ622nkvnvnt7EKun1eCG?usp=sharing - Exploit, Third Party Advisory
References () https://www.dlink.com/en/security-bulletin/ - Not Applicable, Vendor Advisory () https://www.dlink.com/en/security-bulletin/ - Not Applicable, Vendor Advisory

Information

Published : 2022-03-04 16:15

Updated : 2024-11-21 06:34


NVD link : CVE-2021-46381

Mitre link : CVE-2021-46381

CVE.ORG link : CVE-2021-46381


JSON object : View

Products Affected

dlink

  • dap-1620_firmware
  • dap-1620
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')