What is the severity of CVE-2021-29379?

CVE-2021-29379 is classified as a critical vulnerability due to its potential for command injection.

How do I fix CVE-2021-29379?

To fix CVE-2021-29379, disable Universal Plug and Play (UPnP) on D-Link DIR-802 devices or update to a firmware version that addresses this vulnerability.

What devices are affected by CVE-2021-29379?

CVE-2021-29379 affects D-Link DIR-802 A1 devices running firmware version 1.00b05 and below.

What is the exploit method for CVE-2021-29379?

The exploit method for CVE-2021-29379 involves injecting a malicious payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.

Is CVE-2021-29379 related to network security?

Yes, CVE-2021-29379 poses a significant risk to network security due to its exploitation via UPnP services.

Vulnerability/
CVE-2021-29379

high

8.8

CWE

78 77

12/4/2021

3/8/2024

CVE-2021-29379: OS Command Injection

First published: Mon Apr 12 2021(Updated: )

** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Dlink Dir-802 Firmware	<=1.00b05
Dlink Dir-802 Firmware	=a1
All of
Dlink Dir-802 Firmware	<=1.00b05
Dlink Dir-802 Firmware	=a1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2021-29379?
CVE-2021-29379 is classified as a critical vulnerability due to its potential for command injection.
How do I fix CVE-2021-29379?
To fix CVE-2021-29379, disable Universal Plug and Play (UPnP) on D-Link DIR-802 devices or update to a firmware version that addresses this vulnerability.
What devices are affected by CVE-2021-29379?
CVE-2021-29379 affects D-Link DIR-802 A1 devices running firmware version 1.00b05 and below.
What is the exploit method for CVE-2021-29379?
The exploit method for CVE-2021-29379 involves injecting a malicious payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.
Is CVE-2021-29379 related to network security?
Yes, CVE-2021-29379 poses a significant risk to network security due to its exploitation via UPnP services.

agent/weakness
agent/type
agent/severity
agent/references
agent/author
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/first-publish-date
agent/event
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/dlink
canonical/dlink dir-802 firmware
version/dlink dir-802 firmware/1.00b05
version/dlink dir-802 firmware/a1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2021-29379?
CVE-2021-29379 is classified as a critical vulnerability due to its potential for command injection.
How do I fix CVE-2021-29379?
To fix CVE-2021-29379, disable Universal Plug and Play (UPnP) on D-Link DIR-802 devices or update to a firmware version that addresses this vulnerability.
What devices are affected by CVE-2021-29379?
CVE-2021-29379 affects D-Link DIR-802 A1 devices running firmware version 1.00b05 and below.
What is the exploit method for CVE-2021-29379?
The exploit method for CVE-2021-29379 involves injecting a malicious payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.
Is CVE-2021-29379 related to network security?
Yes, CVE-2021-29379 poses a significant risk to network security due to its exploitation via UPnP services.