CVE-2021-40655

Description

D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-40655
• https://legacy.us.dlink.com/pages/product.aspx?id=2b09e95d90ff4cb38830ecc04c89cee5
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-27829
• https://www.dlink.com/en/security-bulletin/
• https://github.com/Ilovewomen/D-LINK-DIR-605/