CVE-2021-40655

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Sep 24, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
May 16, 2024
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-406568.8libsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.CVE-2021-406584.8Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.CVE-2021-40668.8Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craCVE-2021-406607.5An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of serCVE-2021-406617.5A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing TerminCVE-2021-406628.8A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interactiCVE-2021-406639.8deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype PollutiCVE-2021-406688.1The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrarCVE-2021-406699.8SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.CVE-2021-40678.8Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap coCVE-2021-406709.8SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.CVE-2021-406749.8An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php.