CVE-2021-40655: D-Link DIR-605 Router Information Disclosure Vulnerability

High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2024-05-16. EPSS: 86.7% chance of exploitation in the next 30 days.

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

Affected products

• D-Link Dir-605l Firmware: version 2.01mt only

Published 2021-09-24. Last modified 2026-06-17.