CVE-2021-33346: Critical severity d-link dsl-2888a firmware vulnerability

Published Jun 24, 2021

Updated

There is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product. An attacker can use this vulnerability to modify the password of the admin user without authorization.

Affected Software

2 affected components

Dlink Dsl-2888a Firmware

Dlink Dsl-2888a

Event History

Jun 24, 2021

CVE Published

via MITRE·03:01 PM

Data Sourced

via MITRE·03:01 PM

Description

Frequently Asked Questions

What is the severity of CVE-2021-33346?

The severity of CVE-2021-33346 is critical.

How does CVE-2021-33346 affect D-LINK DSL-2888A router?

CVE-2021-33346 allows an attacker to modify the password of the admin user on the D-LINK DSL-2888A router without authorization.

Is Dlink Dsl-2888a firmware affected by CVE-2021-33346?

Yes, Dlink Dsl-2888a firmware is affected by CVE-2021-33346.

How can I fix CVE-2021-33346 vulnerability on my D-LINK DSL-2888A router?

To fix the CVE-2021-33346 vulnerability on your D-LINK DSL-2888A router, you should update the router firmware to the latest version provided by D-LINK.

Where can I find more information about CVE-2021-33346?

You can find more information about CVE-2021-33346 on the GitHub page (https://github.com/EmYiQing/CVE) or the D-LINK security bulletin (https://www.dlink.com/en/security-bulletin/).