Dsl-2640b Firmware (Dlink) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-01-05. Vendor: Dlink.

CVEs of Dsl-2640b Firmware

• CVE-2026-0625 - CVSS 9.3 (critical), 2026-01-05: Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an…
• CVE-2020-9276 - CVSS 8.8 (high), 2020-04-20: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the device's web servers, is…
• CVE-2020-9279 - CVSS 9.8 (critical), 2020-04-20: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in…
• CVE-2020-9275 - CVSS 9.8 (critical), 2020-04-20: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of…
• CVE-2020-9278 - CVSS 9.1 (critical), 2020-04-20: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an unauthenticated URL.
• CVE-2020-9277 - CVSS 9.8 (critical), 2020-04-20: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform…
• CVE-2012-1308 - CVSS 6.8 (medium), 2012-10-08: Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of…