Enhancement: cves/2021/CVE-2021-21816.yaml by md

patch-1
MostInterestingBotInTheWorld 2023-02-01 12:19:03 -05:00
parent 85f59a74b5
commit 618caa2387
1 changed files with 5 additions and 3 deletions

View File

@ -1,13 +1,13 @@
id: CVE-2021-21816
info:
name: D-Link DIR-3040 - Syslog Information Disclosure
name: D-Link DIR-3040 1.13B03 - Information Disclosure
author: gy741
severity: medium
description: An information disclosure vulnerability exists in the Syslog functionality of D-Link DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker
can send an HTTP request to trigger this vulnerability.
description: D-Link DIR-3040 1.13B03 is susceptible to information disclosure vulnerability in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations.
reference:
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1281
- https://nvd.nist.gov/vuln/detail/CVE-2021-21816
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
cvss-score: 4.3
@ -33,3 +33,5 @@ requests:
- type: status
status:
- 200
# Enhanced by md on 2023/02/01