CVE:CVE-2021-28840
CNNVD:CNNVD-202108-999
D-Link DAP-2310和DAP-2330都是中国台湾友讯（D-Link）公司的产品。DAP-2310是一款单频段无线网络接入点，适合需要快速可靠无线网络的小型企业或学校。DAP-2330是无线N300单频PoE接入点。提供可靠、高速的无线性能，最大无线信号速率高达 300 Mbps。
D-Link多款产品存在安全漏洞，该漏洞源于当二进制处理特定的 HTTP GET 请求时，upload_file 变量中的内容在 upload_config 函数中为 NULL，则 strncasecmp 将 NULL 作为了第一个参数，从而导致 NULL 指针解引用。以下产品和版本受到影响：D-Link DAP-2310 2.07.RC031、DAP-2330 1.07.RC028、DAP-2360 2.07.RC043、DAP-2553 3.06.RC027、DAP-2660 RAP-1.76.RC031、DAP-2660 RCAP-1.46.103.13。
solution:Upgrade dlink dap-2310_firmware to a higher version than 2.0.7.rc031,and avoid the version 2.0.7.rc031; Upgrade dlink dap-2330_firmware to a higher version than 1.07.rc028,and avoid the version 1.07.rc028; Upgrade dlink dap-2360_firmware to a higher version than 2.07.rc043,and avoid the version 2.07.rc043; Upgrade dlink dap-2553_firmware to a higher version than 3.06.rc027,and avoid the version 3.06.rc027; Upgrade dlink dap-2660_firmware to a higher version than 1.13.rc074,and avoid the version 1.13.rc074; Upgrade dlink dap-2690_firmware to a higher version than 3.16.rc100,and avoid the version 3.16.rc100; Upgrade dlink dap-2695_firmware to a higher version than 1.17.rc063,and avoid the version 1.17.rc063; Upgrade dlink dap-3320_firmware to a higher version than 1.01.rc014,and avoid the version 1.01.rc014; Upgrade dlink dap-3662_firmware to a higher version than 1.01.rc022,and avoid the version 1.01.rc022