What’s Vulnerable › Vulnerabilities

CVE-2021-46381

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 58.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-04 · updated 2026-06-17
• Weakness: CWE-22

Description

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

Affected products

• D-Link DAP-1620: all versions

References

• http://packetstormsecurity.com/files/167070/DLINK-DAP-1620-A1-1.01-Directory-Traversal.html
• https://drive.google.com/drive/folders/19OP09msw8l7CJ622nkvnvnt7EKun1eCG?usp=sharing
• https://www.dlink.com/en/security-bulletin/
• http://packetstormsecurity.com/files/167070/DLINK-DAP-1620-A1-1.01-Directory-Traversal.html
• https://drive.google.com/drive/folders/19OP09msw8l7CJ622nkvnvnt7EKun1eCG?usp=sharing
• https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2021-46381 or the next vulnerability affects your stack