nvd-json-data-feeds/CVE-2021/CVE-2021-453xx/CVE-2021-45382.json

{
  "id": "CVE-2021-45382",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2022-02-17T21:15:07.737",
  "lastModified": "2022-02-25T21:25:59.227",
  "vulnStatus": "Analyzed",
  "cisaExploitAdd": "2022-04-04",
  "cisaActionDue": "2022-04-25",
  "cisaRequiredAction": "The impacted product is end-of-life and should be disconnected if still in use.",
  "cisaVulnerabilityName": "D-Link Multiple Routers Remote Code Execution Vulnerability",
  "descriptions": [
    {
      "lang": "en",
      "value": "A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life (\"EOL\") /End of Service Life (\"EOS\") Life-Cycle and as such this issue will not be patched."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad de Ejecuci\u00f3n de Comandos Remota (RCE) en todas las revisiones H/W de la serie de routers D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L y DIR-836L por medio de la funci\u00f3n DDNS en el archivo binario ncc2. Nota: Los DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, todas las revisiones de hardware, han llegado al final de su vida \u00fatil (\"EOL\") / fin de la vida \u00fatil (\"EOS\") y, por lo tanto, este problema no ser\u00e1 parcheado"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-820l_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC65DE67-1143-4165-BCE2-1EBEB2510003"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "88CE60CD-DCDA-43E0-80A9-257557EDBC29"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-820lw_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5D0B0B3-29C1-4143-B1C2-D228AA9694B8"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-820lw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CFE3EE8-70B8-4A1D-A449-A31B3E4897AB"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-826l_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B65A1C2-670D-49A3-91D4-B592815CC6D7"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "36554D63-D4A3-499A-BD79-8C8729CB003E"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-830l_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E09C68C8-3CCF-43A9-AE31-011F08A93F55"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "889685BB-EFD4-46CA-BBF1-F215DAD02C92"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-836l_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D284E3D-970D-41A7-B7CA-B531D2BE5666"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE2ED91B-738D-448B-B7E0-D869539571F1"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dlink:dir-810l_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C56CE73-9B68-4A0A-A2A3-878D90A0D4EF"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B79563C-609A-4F9F-8F2F-FFF3D10E6684"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/doudoudedi/D-LINK_Command_Injection1/blob/main/D-LINK_Command_injection.md",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10264",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}