CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vct_wan; the sbin/httpd would invoke the strchr function and take NULL as a first argument, which finally leads to the segmentation fault. NOTE: The DIR-825 and all hardware revisions is considered End of Life and as such this issue will not be patched

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Published
2021-08-10T19:52Z
EPSS history
Timeline
  • 10 AUG 19:52Z
    Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service
    cvelistv5