Cyber Resilience

CVE-2021-42627

Critical

Published: 23 August 2022

Published
23 August 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.7425 98.9th percentile
Risk Priority 64 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-42627 is a critical-severity an unspecified weakness vulnerability in Dlink Dir-615 Firmware. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 1.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

CWE(s)
NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

dlink
dir-615 firmware
20.06
dlink
dir-615 j1 firmware
20.06
dlink
dir-615 t1 firmware
20.06
dlink
dir-615jx10 firmware
20.06

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References