CVE-2021-20694

HIGH

D-Link DAP-1880AC Firmware < 1.21 - Authenticated Telnet Service Activation via Improper Access Control

Title source: llm
STIX 2.1

Description

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/en/vu/JVNVU92898656/index.html

Scores

CVSS v3 8.8
EPSS 0.0020
EPSS Percentile 41.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
dlink/dap-1880ac_firmware < 1.21
Published Apr 26, 2021
Tracked Since Feb 18, 2026