D-Link DIR-2640-US Account Password Plaintext Storage Vulnerability

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to easily log in to the target router via a serial port and gain root privileges...

D-Link DIR-2640-US Buffer Overflow Vulnerability

The D-Link DIR-2640-US is a smart AC2600 high power Wi-Fi Gigabit router. A buffer overflow vulnerability exists in the D-Link DIR-2640-US version 1.01B04. An attacker can exploit this vulnerability by overriding a global variable in a .bss segment to cause a process crash or change...

CVE-2021-34204

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600DIR-2640 stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be modified by normal users...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

CVE-2021-34201

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes...

Design/Logic Flaw

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600DIR-2640 stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be modified by normal users...

Default credentials

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

Buffer overflow

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes...

CVE-2021-34204

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600DIR-2640 stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be modified by normal users...

CVE-2021-34201

CVE-2021-34201 affects D-Link DIR-2640-US firmware 1.01B04. Several buffer overflow/out-of-bounds vulnerabilities in certain processes allow a local user to overwrite a global variable in the .bss section, causing the target process to crash or change behavior. Exploitation is described as local ...

CVE-2021-34201

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes...

CVE-2021-34202

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remo...

CVE-2021-34202

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remo...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

CVE-2021-34203

CVE-2021-34203 affects the D-Link DIR-2640-US router (version 1.01B04). The vulnerability is described as Incorrect Access Control during PPPoE setup, where the router starts the quagga process with the original default password and port, allowing an attacker to log in via telnet, modify routing ...

CVE-2021-34202

CVE-2021-34202 affects D-Link AC2600 (DIR-2640) with firmware 1.01B04, where multiple out-of-bounds vulnerabilities in some processes allow ordinary privileges to be elevated to administrator privileges, enabling local arbitrary code execution. The description provides a chain where privilege esc...

PT-2021-20399

Name of the Vulnerable Software and Affected Versions: D-Link AC2600DIR-2640 version 1.01B04 Description: The issue involves multiple out-of-bounds vulnerabilities in certain processes. These vulnerabilities can elevate ordinary permissions to administrator permissions, leading to local arbitrary...

D-Link AC2600 缓冲区错误漏洞

The D-Link AC2600 is a wireless device from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link AC2600, which originates from multiple out-of-bounds vulnerabilities in the D-Link AC2600 DIR-2640 1.01B04, where normal privileges can be elevated to administrator privileges...

PT-2021-20398

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640-US version 1.01B04 Description: The issue is related to Buffer Overflow, with multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .b...

D-Link DIR-2640-US 安全漏洞

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to easily log in to the target router via a serial port and gain root privileges...