CVE-2021-39613

D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash values. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-798
• CWE-798

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10237Vendor Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory
• https://www.nussko.com/advisories/advisory-2021-08-01.txtExploit, Third Party Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10237Vendor Advisory
• https://www.dlink.com/en/security-bulletin/Vendor Advisory
• https://www.nussko.com/advisories/advisory-2021-08-01.txtExploit, Third Party Advisory

Published

Aug 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39599Multiple Cross Site Scripting (XSS) vulnerabilities exists i…6.1
• CVE-2021-3960Improper Limitation of a Pathname to a Restricted Directory …7.8
• CVE-2021-39602A Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the…6.5
• CVE-2021-39608Remote Code Execution (RCE) vulnerabilty exists in FlatCore-…7.2
• CVE-2021-39609Cross Site Scripting (XSS) vulnerability exiss in FlatCore-C…5.4
• CVE-2021-3961snipe-it is vulnerable to Improper Neutralization of Input D…5.4
• CVE-2021-39614D-Link DVX-2000MS contains hard-coded credentials for undocu…9.8
• CVE-2021-39615D-Link DSR-500N version 1.02 contains hard-coded credentials…9.8
• CVE-2021-39616Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2…9.8
• CVE-2021-39617Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-39618In multiple methods of EuiccNotificationManager.java, there …7.8
• CVE-2021-39619In updatePackageMappingsData of UsageStatsService.java, ther…7.8