CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_unauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are considered End of Life and as such this issue will not be patched

• CWE-476

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10213Vendor Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10213Vendor Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory

Published

Aug 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29271remark42 before 1.6.1 allows XSS, as demonstrated by "Locato…6.1
• CVE-2021-29272bluemonday before 1.0.5 allows XSS because certain Go lowerc…6.1
• CVE-2021-29274Redmine 4.1.x before 4.1.2 allows XSS because an issue's sub…6.1
• CVE-2021-29279There is a integer overflow in function filter_core/filter_p…7.8
• CVE-2021-29280In TP-Link Wireless N Router WR840N an ARP poisoning attack …6.4
• CVE-2021-29281File upload vulnerability in GFI Mail Archiver versions up t…9.8
• CVE-2021-29295Null Pointer Dereference vulnerability exists in D-Link DSP-…7.5
• CVE-2021-29296Null Pointer Dereference vulnerability in D-Link DIR-825 2.1…7.5
• CVE-2021-29297Buffer Overflow in Emerson GE Automation Proficy Machine Edi…5.3
• CVE-2021-29298Improper Input Validation in Emerson GE Automation Proficy M…5.3
• CVE-2021-29300The @ronomon/opened library before 1.5.2 is vulnerable to a …9.8
• CVE-2021-29302TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 con…8.1