Dir-2640-us Firmware (Dlink) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2021-12-30. Vendor: Dlink.

CVEs of Dir-2640-us Firmware

• CVE-2021-20133 - CVSS 6.1 (medium), 2021-12-30: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote,…
• CVE-2021-20134 - CVSS 8.4 (high), 2021-12-30: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote,…
• CVE-2021-20132 - CVSS 8.8 (high), 2021-12-30: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain…
• CVE-2021-34203 - CVSS 8.1 (high), 2021-06-16: D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in the way of…
• CVE-2021-34201 - CVSS 7.1 (high), 2021-06-16: D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640).…
• CVE-2021-34204 - CVSS 6.8 (medium), 2021-06-16: D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in plain…
• CVE-2021-34202 - CVSS 7.8 (high), 2021-06-16: There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator…