← Database

CVE-2021-45382

CRITICAL CVSS: 9.8 Published: 2022-02-17 Modified: 2026-06-17

Description

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.

Affected Platforms

Dlink Dir-820Lw FirmwareDlink Dir-810L FirmwareDlink Dir-836L FirmwareDlink Dir-830L FirmwareDlink Dir-820L FirmwareDlink Dir-826L FirmwareDlink Dir-810LDlink Dir-820LwDlink Dir-820LDlink Dir-830L

Weakness Type

CWE-78, CWE-78

References