Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-34110 State: PUBLISHED Published: 2021-07-08T12:20:46 Last Updated: 2024-08-04T00:05:52.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges. Additional Analyst Notes: - CVE Program Container: References: - http://winwastenet.com - http://nica.it - https://packetstormsecurity.com/files/163335/WinWaste.NET-1.0.6183.16475-Local-Privilege-Escalation.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/204780 - https://www.exploit-db.com/exploits/50083
CVE ID: CVE-2021-34111 State: PUBLISHED Published: 2022-05-20T02:10:39 Last Updated: 2024-08-04T00:05:52.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php. Additional Analyst Notes: - CVE Program Container: References: - https://docs.unsafe-inline.com/0day/thecus-n4800eco-nas-server-control-panel-comand-injection
CVE ID: CVE-2021-34117 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-20T13:54:57.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seopanel.org/ - https://github.com/seopanel/Seo-Panel/issues/219 - https://gist.github.com/victomteng1997/a0d47d6982a7b382f632ec7e8c3307f1
CVE ID: CVE-2021-34119 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T16:49:17.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/michaelrsweet/htmldoc/issues/431 - https://github.com/michaelrsweet/htmldoc/commit/85fa76d77ed69927d24decf476e69bedc7691f48
CVE ID: CVE-2021-34121 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T17:04:36.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/michaelrsweet/htmldoc/issues/433 - https://github.com/michaelrsweet/htmldoc/commit/c67bbd8756f015e33e4ba639a40c7f9d8bd9e8ab
CVE ID: CVE-2021-34122 State: PUBLISHED Published: 2022-03-10T14:50:33 Last Updated: 2024-08-04T00:05:52.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rockcarry/ffjpeg/issues/36 - https://github.com/rockcarry/ffjpeg/pull/37
CVE ID: CVE-2021-34123 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T17:00:12.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf() in asm.c allows attackers to execute arbitrary code on the system via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/atasm/bugs/23/
CVE ID: CVE-2021-34125 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:33:01.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nuttx.apache.org/docs/latest/applications/nsh/commands.html#access-memory-mb-mh-and-mw - https://www.st.com/resource/en/application_note/dm00493651-introduction-to-stm32-microcontrollers-security-stmicroelectronics.pdf - https://nuttx.apache.org/ - https://gist.github.
ntroduction-to-stm32-microcontrollers-security-stmicroelectronics.pdf - https://nuttx.apache.org/ - https://gist.github.com/swkim101/f473b9a60e6d4635268402a2cd2025ac - https://github.com/PX4/PX4-Autopilot/pull/17264/commits/555f900cf52c0057e4c429ff3699c91911a21cab - https://github.com/apache/incubator-nuttx/pull/3292/commits/016873788280ca815ba886195535bbe601de6e48 - https://github.com/apache/incubator-nuttx-apps/pull/647/commits/2fc1157f8585acc39f13a31612ebf890f41e76ca - https://github.com/PX4/PX4-Autopilot/issues/17062
CVE ID: CVE-2021-34128 State: PUBLISHED Published: 2021-06-15T14:05:42 Last Updated: 2024-08-04T00:05:52.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bettershop/LaikeTui/issues/8
CVE ID: CVE-2021-34129 State: PUBLISHED Published: 2021-06-15T14:05:18 Last Updated: 2024-08-04T00:05:52.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bettershop/LaikeTui/issues/9
CVE ID: CVE-2021-34141 State: PUBLISHED Published: 2021-12-17T18:43:17 Last Updated: 2024-08-04T00:05:52.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/numpy/numpy/issues/18993 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-34143 State: PUBLISHED Published: 2021-09-07T06:19:56 Last Updated: 2024-08-04T00:05:52.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C_DEMO_V1.0 does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after paging procedure. User intervention is required to restart the device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jieli-Tech/fw-AC63_BT_SDK - https://launchstudio.bluetooth.com/ListingDetails/91371 -
: References: - https://github.com/Jieli-Tech/fw-AC63_BT_SDK - https://launchstudio.bluetooth.com/ListingDetails/91371 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34144 State: PUBLISHED Published: 2021-09-07T05:55:01 Last Updated: 2024-08-04T00:05:52.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMP_SCO_Link_Request packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://g
rt) of the device to restore BT connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Jieli-Tech/fw-AC63_BT_SDK - https://launchstudio.bluetooth.com/ListingDetails/91371 - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34145 State: PUBLISHED Published: 2021-09-07T06:22:08 Last Updated: 2024-08-04T00:05:52.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transc
rogram Container: References: - https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34146 State: PUBLISHED Published: 2021-09-07T06:18:00 Last Updated: 2024-08-04T00:05:52.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart (crash) of the device by flooding it with LMP_AU_Rand packets after the paging procedure. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://dl.packetstormsecurity.n
tation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34147 State: PUBLISHED Published: 2021-09-07T06:26:51 Last Updated: 2024-08-04T00:05:52.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually trigger a crash via multiple attempts of sending a crafted LMP timing accuracy response followed by a sudden reconnection with a random BDAddress. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.c
nnection with a random BDAddress. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34148 State: PUBLISHED Published: 2021-09-07T06:24:25 Last Updated: 2024-08-04T00:05:52.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://d
www.cypress.com/documentation/datasheets/cyw20735b1-single-chip-bluetooth-transceiver-wireless-input-devices - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34149 State: PUBLISHED Published: 2021-09-07T06:16:16 Last Updated: 2024-08-04T00:05:52.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it with LMP_AU_Rand packets after the paging procedure. Additional Analyst Notes: - CVE Program Container: References: - https://www.ti.com/tool/CC256XC-BT-SP#primary-sw - https://www.ti.com/product/CC2564C - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34150 State: PUBLISHED Published: 2021-09-07T05:59:31 Last Updated: 2024-08-04T00:05:52.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Classic implementation on Bluetrum AB5301A devices with unknown firmware versions does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections (disabling the AB5301A inquiry and page scan procedures) via a crafted LMP packet. The user needs to manually perform a power cycle (restart) of the device to restore BT connectivity. Additional Analyst Notes: - CVE Program Container: References: - http://www.b
of the device to restore BT connectivity. Additional Analyst Notes: - CVE Program Container: References: - http://www.bluetrum.com/product/ab5301a.html - https://dl.packetstormsecurity.net/papers/general/braktooth.pdf
CVE ID: CVE-2021-34164 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:16:16.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lizhipay/faka/issues/22
CVE ID: CVE-2021-34165 State: PUBLISHED Published: 2021-07-28T15:02:56 Last Updated: 2024-08-04T00:05:52.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in Sourcecodester Basic Shopping Cart 1.0 allows a remote attacker to Bypass Authentication and become Admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49741
CVE ID: CVE-2021-34166 State: PUBLISHED Published: 2021-07-28T15:04:23 Last Updated: 2024-08-04T00:05:52.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49740
CVE ID: CVE-2021-34167 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:53:10.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via taocms/admin/admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/taogogo/taocms/issues/6
CVE ID: CVE-2021-34170 State: PUBLISHED Published: 2021-06-15T15:49:23 Last Updated: 2024-08-04T00:05:52.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/darksouls3/comments/n1235k/potential_pc_security_exploit_spreading/
CVE ID: CVE-2021-34173 State: PUBLISHED Published: 2021-07-14T18:32:54 Last Updated: 2024-08-04T00:05:52.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/E7mer - https://github.com/E7mer/OWFuzz
CVE ID: CVE-2021-34174 State: PUBLISHED Published: 2021-07-14T18:37:01 Last Updated: 2024-08-04T00:05:52.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUS AX6100. An attacker may cause a Denial of Service (DoS) to any device connected to BCM4352 or BCM43684 routers via an association or reassociation frame. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/E7mer - https://github.com/E7mer/OWFuzz
CVE ID: CVE-2021-34181 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:25:57.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/mrhonest/p/16949304.html
CVE ID: CVE-2021-34182 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:14:58.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tsl0922/ttyd/issues/692
CVE ID: CVE-2021-34183 State: REJECTED Published: 2021-06-25T14:52:08 Last Updated: 2021-12-08T13:02:07 Description: No description available.
CVE ID: CVE-2021-34184 State: PUBLISHED Published: 2021-06-25T14:52:40 Last Updated: 2024-08-04T00:05:52.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mackron/miniaudio/issues/319
CVE ID: CVE-2021-34185 State: PUBLISHED Published: 2021-06-25T14:52:24 Last Updated: 2024-08-04T00:05:52.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mackron/miniaudio/issues/320
CVE ID: CVE-2021-34187 State: PUBLISHED Published: 2021-06-28T15:35:57 Last Updated: 2024-08-04T00:05:52.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chamilo/chamilo-lms/commit/f7f93579ed64765c2667910b9c24d031b0a00571 - https://github.com/chamilo/chamilo-lms/commit/005dc8e9eccc6ea35264064ae09e2e84af8d5b59 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-67-2021-05-27-High-impact-very-high-risk-Unauthenticated-SQL-injection - https://murat.one/?
/wiki/Security_issues#Issue-67-2021-05-27-High-impact-very-high-risk-Unauthenticated-SQL-injection - https://murat.one/?p=118
CVE ID: CVE-2021-34190 State: PUBLISHED Published: 2021-07-06T18:58:57 Last Updated: 2024-08-04T00:05:52.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module. Additional Analyst Notes: - CVE Program Container: References: - https://research.0xdutra.com/posts/research-issabel-stored-xss/ - https://www.youtube.com/watch?v=apJH_D68lZI
CVE ID: CVE-2021-34193 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-11-03T21:44:50.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27719 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30800 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30112 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28768 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28855 - https://bugs.chromium.org/p/oss-fuzz/issues/de
?id=28768 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28855 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29912 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28843 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31540 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31448
CVE ID: CVE-2021-34201 State: PUBLISHED Published: 2021-06-16T19:50:16 Last Updated: 2024-08-04T00:05:52.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640). Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-2640-us.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34201
CVE ID: CVE-2021-34202 State: PUBLISHED Published: 2021-06-16T18:56:06 Last Updated: 2024-08-04T00:05:52.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-2640-us.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2
www.dlink.com/en/security-bulletin/ - http://dir-2640-us.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34202
CVE ID: CVE-2021-34203 State: PUBLISHED Published: 2021-06-16T19:02:03 Last Updated: 2024-08-04T00:05:52.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify routing information, monitor the traffic of all devices under the router, hijack DNS and phishing attacks. In addition, this interface is likely to be questioned by customers as a backdoor, because the interface should not be expos
ddition, this interface is likely to be questioned by customers as a backdoor, because the interface should not be exposed. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-2640-us.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34203