CVE-2021-37388: D-Link Dir-615 Firmware

Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days.

A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution.

Affected products

• D-Link Dir-615 Firmware: version 3.03ww only

Published 2021-08-06. Last modified 2026-06-17.