Vulnerability Details CVE-2021-40284
D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bin/New_GUI/Igmp.asp". Authenticated remote attackers can trigger this vulnerability by sending a long string in parameter 'igmpsnoopEnable' via an HTTP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 6.8
Products affected by CVE-2021-40284
-
cpe:2.3:h:dlink:dsl-3782:-
-
cpe:2.3:o:dlink:dsl-3782_firmware:eu_1.01
-
cpe:2.3:o:dlink:dsl-3782_firmware:eu_1.03