Authentication flaw

2020-03-0515:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn’t perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice.

CPENameOperatorVersion
dsl-2640b_firmwareeqe1eu1.1

CPE	Name	Operator	Version
	dsl-2640b_firmware	eq	e1eu1.1

References

ktln2.org/2020/03/05/cve-2020-9544/

www.dlink.com/en/security-bulletin