Live › vulnerability › CVE-2021-45382
Go to dashboardD-Link routers on all series H/W revisions have a remote code execution flaw in the DDNS function of the ncc2 binary. An attacker on the internet can run commands on the router without logging in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link Multiple Routers | vendor | – | – |
Unknown from the sources.
Disconnect the affected D-Link router if still in use, since the vendor product is end-of-life and no patch is named in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
This page as .md · .json · in your agent: get_signal("CVE-2021-45382")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.