CVE-2021-21818: D-Link Dir-3040 Firmware

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

• D-Link Dir-3040 Firmware: version 1.13b03 only

Published 2021-07-16. Last modified 2026-06-17.