Skip to content
OpenAdvisories
High WID-SEC-2023-0087 3 CVEs

D-LINK Router DIR-2640: Mehrere Schwachstellen

Published Jan 12, 2023 · Updated May 7, 2023 · Revision 2 · de-DE

Vendor: D-Link Product: Router DIR-2640 < 1.11B02_Beta_Hotfix

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen im D-LINK Routermodell DIR-2640 ausnutzen, um beliebigen Programmcode auszuführen und Sicherheitsmaßnahmen zu umgehen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 3

  • High 8.8
    CVE-2023-32149

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is n…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32147

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to e…

    D-Link DIR-2640 Network devices
  • Medium 6.5
    CVE-2023-32148 EPSS 29%

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerabi…

    D-Link DIR-2640 Network devices

Revision history

  1. #2

    CVE's ergänzt

  2. #1

    Initiale Fassung

References