Vulnerability Description
Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dsp-W215 Firmware | 1.10 |
| Dlink | Dsp-W215 | - |
Related Weaknesses (CWE)
References
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP1Vendor Advisory
- https://www.dlink.com/en/security-bulletin/Vendor Advisory
- https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP1Vendor Advisory
- https://www.dlink.com/en/security-bulletin/Vendor Advisory
FAQ
What is CVE-2021-29295?
CVE-2021-29295 is a vulnerability with a CVSS score of 7.5 (HIGH). Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP r...
How severe is CVE-2021-29295?
CVE-2021-29295 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-29295?
Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dsp-W215 Firmware, Dlink Dsp-W215.