Dir-2640 Firmware (Dlink) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-05-23. Vendor: Dlink.
CVEs of Dir-2640 Firmware
- CVE-2024-5293 - CVSS 8.8 (high), 2024-05-23: D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute…
- CVE-2023-32150 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
- CVE-2023-32153 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
- CVE-2023-32149 - CVSS 8.8 (high), 2024-05-03: D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
- CVE-2023-32152 - CVSS 6.5 (medium), 2024-05-03: D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on…
- CVE-2023-32151 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
- CVE-2023-32147 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute…
- CVE-2023-32148 - CVSS 6.5 (medium), 2024-05-03: D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on…
- CVE-2022-1262 - CVSS 7.8 (high), 2022-04-11: A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as…
