Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-27342. PoCs published by mavlevin.
AI-analyzed exploit summary This exploit bypasses authentication throttling in D-Link routers via a timing side-channel, allowing brute-force attacks on the telnet service with reduced delays. It leverages socket interactions to detect successful authentication by analyzing response timing.
Description
An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack
Exploits (2)
This exploit bypasses authentication throttling in D-Link routers via a timing side-channel, allowing brute-force attacks on the telnet service with reduced delays. It leverages socket interactions to detect successful authentication by analyzing response timing.
This repository contains a functional exploit for CVE-2021-27342, which bypasses authentication throttling in D-Link routers' telnet service, allowing brute-force attacks with minimal delay between attempts.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N