CVE-2021-28143: D-Link Dir-841 Firmware

High severity, CVSS 8.0. EPSS: 47.3% chance of exploitation in the next 30 days.

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).

Affected products

• D-Link Dir-841 Firmware: version 3.03 only; version 3.04 only

Published 2021-03-11. Last modified 2026-06-17.