CVE-2021-21913
CRITICALDlink Dir-3040 Firmware - Hard-coded Credentials
Title source: ruleDescription
An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability.
Scores
CVSS v3
9.8
EPSS
0.0069
EPSS Percentile
71.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-798
Status
published
Affected Products (1)
dlink/dir-3040_firmware
Timeline
Published
Sep 23, 2021
Tracked Since
Feb 18, 2026