NetSight
critical9.8

CVE-2021-42627

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose t…

Impact

The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.

Affected products

VendorProductAffected versions
DlinkDir-615 Firmware
Version 20.06
DlinkDir-615 J1 Firmware
Version 20.06
DlinkDir-615 T1 Firmware
Version 20.06
DlinkDir-615jx10 Firmware
Version 20.06

References