CVE-2021-41442
HighCVSS 7.5Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
An HTTP smuggling vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to perform a DoS attack by sending a specially crafted HTTP packet.
Risk Assessment
An attacker can make the router's web interface unavailable, preventing device management and potentially disrupting local network operations.
Recommendation
Immediately update the D-Link DIR-X1860 firmware to version v1.10WWB09_Beta or later, which includes a fix for this vulnerability.
Other vulnerabilities in D-Link DIR-X1860
See all- CVE-2021-41445Medium
A reflected cross-site scripting (XSS) vulnerability exists in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta. A remote unauthenticated attacker can execute code on the victim's device by sending a crafted URL to the victim.
- CVE-2021-41441High
A DoS vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated victim. The victim must visit this URL for the router to reboot.
Original NVD description (English source)
An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.