Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched
References
Link | Resource |
---|---|
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10211 | Vendor Advisory |
https://www.dlink.com/en/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
07 Nov 2023, 03:32
Type | Values Removed | Values Added |
---|---|---|
Summary | Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched |
17 Aug 2021, 18:08
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-476 | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
References | (MISC) https://www.dlink.com/en/security-bulletin/ - Vendor Advisory | |
References | (MISC) https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10211 - Vendor Advisory | |
CPE | cpe:2.3:h:dlink:dsp-w215:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dsp-w215_firmware:1.10:*:*:*:*:*:*:* |
10 Aug 2021, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-10 20:15
Updated : 2024-04-11 01:11
NVD link : CVE-2021-29295
Mitre link : CVE-2021-29295
CVE.ORG link : CVE-2021-29295
JSON object : View
Products Affected
dlink
- dsp-w215
- dsp-w215_firmware
CWE
CWE-476
NULL Pointer Dereference