CVE-2021-33259

MediumCVSS 5.3

Published: 31/10/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.72%

75th percentile - higher than 75% of all known CVEs

Summary

Several web interfaces on the D-Link DIR-868LW router version 1.12b lack authentication requirements, allowing attackers to access users' DNS query history.

Risk Assessment

An attacker can obtain sensitive information about visited websites, compromising user privacy and potentially enabling further attacks.

Recommendation

Update the router firmware to the latest available version and configure strong authentication for all administrative interfaces.

Original NVD description (English source)

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history.