Known vulnerabilities in DIR-3040
Vendor:
D-Link
Software:
DIR-3040
Software CPE:
cpe:2.3:h:d-link:dir-3040:*:*:*:*:*:*:*:*
Website:
https://www.dlink.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71760 - Heap-based Buffer Overflow CVE-2022-43648 |
CWE-122 | Medium | 1.20B03_Beta_Hotfix | 02.02.2023 |
SB2023020223 |
||
| #VU56889 - Use of Hard-coded Credentials CVE-2021-21913 |
CWE-798 | High | - | 27.09.2021 |
SB2021071610 |
||
| #VU54936 - Use of Hard-coded Credentials CVE-2021-21820 |
CWE-798 | High | - | 16.07.2021 |
SB2021071610 |
||
| #VU54935 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-21819 |
CWE-78 | Low | - | 16.07.2021 |
SB2021071610 |
||
| #VU54934 - Exposure of sensitive information to an unauthorized actor CVE-2021-21817 |
CWE-200 | Medium | - | 16.07.2021 |
SB2021071610 |
||
| #VU54933 - Exposure of sensitive information to an unauthorized actor CVE-2021-21816 |
CWE-200 | Medium | - | 16.07.2021 |
SB2021071610 |
||
| #VU54932 - Use of Hard-coded Password CVE-2021-21818 |
CWE-259 | Medium | - | 16.07.2021 |
SB2021071610 |