NVD disclosure day

Published threat advisories for August 23, 2022

CVE advisoryCRITICAL

CVE-2021-42627

D-Link DIR-615 Router WAN Page Accessible Without Authentication

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An unauthenticated vulnerability exists in D-Link DIR-615 devices that allows direct access to the WAN configuration page. Attackers could view sensitive WAN settings and modify data fields, potentially impacting network security. This is relevant as the router's WAN interface is often exposed to the network.

NVD published:

CVE advisoryCRITICAL

CVE-2021-42232

TP-Link Archer A7 Command Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A command injection vulnerability in TP-Link Archer A7 routers allows attackers to execute arbitrary commands on the device. This could compromise the router's functionality and the network it manages. The vulnerability is reachable via the network, and its impact should be assessed for edge devices.

NVD published: