Skip to content
Connect AISign inSign up free
CVE-2021-406557.5HighCWE-863

CVE-2021-40655: D-Link DIR-605 - Information Disclosure

D-Link · DIR-605 Router

Affected: D-Link DIR-605 Router · Exploitation: in CISA KEV since 16 May 2024

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

ExploitationIn CISA KEV

  1. In CISA KEVCISA KEV catalogue16 May 2024
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not established: not seen
87.0%probability of exploitation in the next 30 days
99th percentile
050100

Higher than 99% of scored CVEs

7.5HighCVSS 3.1
LowHigh

DescriptionCVE.org

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
CISA KEV
Listed since 16 May 2024 · catalogue entry
Public check
D-Link DIR-605 - Information Disclosure · nuclei template in projectdiscovery/nuclei-templates
Vendor
D-Link

What changed

  1. CISA added it to the KEV catalogue CISA

CoverageNo articles yet

No CyberSIXT article names CVE-2021-40655 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References