CVE-2021-33259: D-Link Dir-868lw Firmware

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history.

Affected products

• D-Link Dir-868lw Firmware: version 1.12b only

Published 2021-10-31. Last modified 2026-07-09.