dlink dir-3040 firmware

Name: dlink dir-3040 firmware
Brand: dlink

productUS

cpe:2.3:o:dlink:dir-3040_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical8high14medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-21816US	medium4.3	32.4% (98th)	—	no fix	2021-07-16	= 1.13b03
CVE-2022-44832US	critical9.8	4.05% (91st)	—	no fix	2022-12-14	= 120b03
CVE-2021-21820US	critical9.8OT elevated	2.96% (87th)	—	no fix	2021-07-16	= 1.13b03
CVE-2021-21819US	high7.2	2.89% (87th)	—	no fix	2021-07-16	= 1.13b03
CVE-2022-1262US	high7.8	2.21% (83rd)	—	no fix	2022-04-11	4 versions
CVE-2021-21913US	critical9.8OT elevated	2.19% (82nd)	—	no fix	2021-09-23	= 1.13b03
CVE-2021-21817US	high7.5	2.01% (81st)	—	no fix	2021-07-16	= 1.13b03
CVE-2021-21818US	high7.5OT elevated	1.69% (77th)	—	no fix	2021-07-16	= 1.13b03
CVE-2023-41229US	high8.8	1.04% (64th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41230US	high8.8	0.96% (61st)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2022-43648US	high8.8	0.91% (60th)	—	no fix	2023-03-29	≤ 1.20b03
CVE-2023-41228US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41227US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41226US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41225US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41220US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41219US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41216US	medium6.8	0.90% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41224US	medium6.8	0.87% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41223US	medium6.8	0.87% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41221US	medium6.8	0.87% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41218US	medium6.8	0.87% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41222US	medium6.8	0.87% (59th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2023-41217US	high7.1	0.75% (55th)	—	no fix	2024-05-03	≤ 1.20b03
CVE-2024-5294US	medium6.5	0.46% (40th)	—	no fix	2024-05-23	= 120b03

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write15 CVEs
CWE-121Stack-based Buffer Overflow14 CVEs
CWE-798Use of Hard-coded Credentials3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan