CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.
Other sources
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Disconnect the impacted D-Link routers (DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, DIR-836L — all hardware revisions) from networks and the Internet; isolate or power off these EOL/EOS devices if still in use, placing them on an isolated management VLAN or removing external access until decommissioned.
Event History
Frequently Asked Questions
What is CVE-2021-45382?
CVE-2021-45382 is a Remote Code Execution (RCE) vulnerability in multiple D-Link routers.
Which D-Link routers are affected by CVE-2021-45382?
The following D-Link routers are affected by CVE-2021-45382: DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L.
What is the severity of CVE-2021-45382?
CVE-2021-45382 has a severity rating of 9.8 (Critical).
How does CVE-2021-45382 work?
CVE-2021-45382 allows remote attackers to execute arbitrary code on the affected D-Link routers through the DDNS function in the ncc2 binary file.
How can I fix CVE-2021-45382?
To fix CVE-2021-45382, it is recommended to update the firmware of the affected D-Link routers to the latest version provided by D-Link.