CVE-2021-41441

HIGH

D-Link DIR-X1860 < 1.10WWB09_Beta - Denial of Service via Crafted URL

Title source: llm

Description

A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim. The authenticated victim need to visit this URL, for the router to reboot.

References (4)

Core 4

Core References

Broken Link x_refsource_misc

http://d-link.com

Vendor Advisory x_refsource_misc

https://www.dlink.com/en/security-bulletin/

Broken Link, URL Repurposed x_refsource_misc

http://dir-x1860.com

Patch, Technical Description, Vendor Advisory x_refsource_misc

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283

Scores

CVSS v3 7.4

EPSS 0.0023

EPSS Percentile 46.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

Details

CWE

CWE-404

Status published

Products (1)

dlink/dir-x1860_firmware < 1.03

Published Feb 09, 2022

Tracked Since Feb 18, 2026