CVE-2021-45382
Last modified
CVE-2021-45382 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.. CISA has confirmed active exploitation in the wild. EPSS estimates a 97.84% chance of exploitation in the next 30 days.
Description
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
Metrics
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-820l Firmware | All versions |
| Dlink | Dir-820lw Firmware | All versions |
| Dlink | Dir-826l Firmware | All versions |
| Dlink | Dir-830l Firmware | All versions |
| Dlink | Dir-836l Firmware | All versions |
| Dlink | Dir-810l Firmware | All versions |
References
- https://github.com/doudoudedi/D-LINK_Command_Injection1/blob/main/D-LINK_Command_injection.mdExploit, Third Party Advisory
- https://github.com/doudoudedi/D-LINK_Command_Injection1/blob/main/D-LINK_Command_injection.mdExploit, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45382US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-45382?
How severe is CVE-2021-45382?
How do I fix CVE-2021-45382?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-45347An Incorrect Access Control vulnerability exists in zzcms 8.…7.5
- CVE-2021-45348An Arbitrary File Deletion vulnerability exists in SourceCod…7.5
- CVE-2021-45357Cross Site Scripting (XSS) vulnerability exists in Piwigo 12…6.1
- CVE-2021-45364A Code Execution vulnerability exists in Statamic Version th…9.8
- CVE-2021-45379Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect a…8.8
- CVE-2021-45380AppCMS 2.0.101 has a XSS injection vulnerability in \templat…6.1
- CVE-2021-45385A Null Pointer Dereference vulnerability exits in ffjpeg d5c…6.5
- CVE-2021-45386tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6()…5.5
- CVE-2021-45387tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4()…5.5
- CVE-2021-45388Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-45389A flaw was found with the JWT token. A self-signed JWT token…9.8
- CVE-2021-45391A Buffer Overflow vulnerability exists in Tenda Router AX12 …7.5
Are you affected by CVE-2021-45382?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST