Vulnerability Spotlight: Multiple vulnerabilities in D-LINK DIR-3040
Summary: Cisco Talos discovered multiple vulnerabilities in the D-LINK DIR-3040 AC3000 wireless router, including information disclosure flaws (CVE-2021-21816 and CVE-2021-21817) that could expose the system log via a crafted network request, and hardcoded password issues (CVE-2021-21818 and CVE-2021-21820) that could cause a denial of service or allow code execution. Talos confirmed version 1.13B03 could be exploited, worked with D-LINK on an update, and released Snort rules 57475-57478 to detect exploitation attempts.
Bottom line: A hardcoded password that grants code execution on a router sitting at the network edge is not a theoretical risk, and Talos confirmed the flaw works against the shipping firmware version 1.13B03.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2021-21816CVE-2021-21817CVE-2021-21818CVE-2021-21819CVE-2021-21820
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026