What is CVE-2021-39615?

CVE-2021-39615 is a vulnerability in the D-Link DSR-500N version 1.02 firmware that contains hard-coded credentials for undocumented user accounts.

What is the severity of CVE-2021-39615?

The severity of CVE-2021-39615 is critical with a CVSS score of 9.8.

How does CVE-2021-39615 affect D-Link DSR-500N?

CVE-2021-39615 affects D-Link DSR-500N version 1.02 firmware by allowing an attacker to log in via SSH or Telnet using the hard-coded credentials in the '/etc/passwd' file.

How can I fix CVE-2021-39615?

Currently, there is no official fix available for CVE-2021-39615. It is recommended to follow the vendor's security advisory for updates and mitigation steps.

CWE-798 is a category of weaknesses called 'Use of Hard-coded Credentials' which applies to CVE-2021-39615.

Vulnerability/
CVE-2021-39615

critical

CWE

798

23/8/2021

4/8/2024

CVE-2021-39615

First published: Mon Aug 23 2021(Updated: )

** UNSUPPORTED WHEN ASSIGNED ** D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain access to the underlying embedded Linux operating system on the device. Fixed in version 2.12/2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Dlink Dsr-500n Firmware	=1.02
Dlink Dsr-500n
All of
Dlink Dsr-500n Firmware	=1.02
Dlink Dsr-500n

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2021-39615?
CVE-2021-39615 is a vulnerability in the D-Link DSR-500N version 1.02 firmware that contains hard-coded credentials for undocumented user accounts.
What is the severity of CVE-2021-39615?
The severity of CVE-2021-39615 is critical with a CVSS score of 9.8.
How does CVE-2021-39615 affect D-Link DSR-500N?
CVE-2021-39615 affects D-Link DSR-500N version 1.02 firmware by allowing an attacker to log in via SSH or Telnet using the hard-coded credentials in the '/etc/passwd' file.
How can I fix CVE-2021-39615?
Currently, there is no official fix available for CVE-2021-39615. It is recommended to follow the vendor's security advisory for updates and mitigation steps.
What is CWE-798?
CWE-798 is a category of weaknesses called 'Use of Hard-coded Credentials' which applies to CVE-2021-39615.

collector/nvd-index
agent/type
agent/first-publish-date
agent/severity
agent/references
agent/weakness
agent/author
agent/description
agent/softwarecombine
agent/tags
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
collector/mitre-cve
source/MITRE
vendor/dlink
canonical/dlink dsr-500n firmware
version/dlink dsr-500n firmware/1.02
canonical/dlink dsr-500n

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.