D-Link - Information Disclosure (CVE-2021-40655)
Description
An informtion disclosure issue exists in D-Link product running the D-Link-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page
psychologyCrowdSec Analysis
CVE-2021-40655 is a vulnerability affecting certain D-Link products, where information disclosure can occur if a remote attacker forges requests to a specific configuration page.
CrowdSec has been tracking this vulnerability and its exploits since 5th of June 2024.
According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2021-40655 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. In addition, according to the CrowdSec network, attack volume against CVE-2021-40655 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Attackers typically attempt to exploit this issue by making requests to endpoints ending with /getcfg.php.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2021-09-24 |
| CISA KEV | 2024-05-16 |
| Rule Released | 2024-06-05 |
| CISA Remediation Deadline | 2024-06-06 |
| CrowdSec First Seen | 2024-11-23 |