CVE-2021-27342: D-Link Dir-842e Firmware

Medium severity, CVSS 5.9. EPSS: 4.6% chance of exploitation in the next 30 days.

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack

Affected products

  • D-Link Dir-842e Firmware: up to and including 3.0.2

Published 2021-05-17. Last modified 2026-06-17.