« Volver al listado

CVE-2021-42783

Estado: ModificadaCrítica (9.8)—

Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dlink — Dwr-932c E1 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-42783",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve_disclosure@tech.gov.sg",
      "affectedData": [
        {
          "vendor": "D-Link",
          "product": "DWR-932C E1",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0.4",
              "versionType": "custom",
              "lessThanOrEqual": "1.0.0.4"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-11-23T22:15:08.023",
  "references": [
    {
      "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10246",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve_disclosure@tech.gov.sg"
    },
    {
      "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10246",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve_disclosure@tech.gov.sg",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Falta de Autenticación para una Función Crítica en el archivo debug_post_set.cgi del firmware D-Link DWR-932C E1 permite a un atacante no autenticado ejecutar acciones administrativas"
    }
  ],
  "lastModified": "2026-06-17T04:10:08.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dlink:dwr-932c_e1_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350073F6-DBEA-4193-B6A2-5BF62F40776E",
              "versionEndIncluding": "1.0.0.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dlink:dwr-932c:revision_e:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1BDACE81-A63D-462F-8C08-6AB9A8C078A1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve_disclosure@tech.gov.sg"
}