The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to circumvent security restrictions and execute arbitrary code.

The vulnerability of the HNAP1 protocol implementation in the D-Link DIR-2640-US router microprogramming system is related to insufficient validation of the string entered by the user before it is used to execute system calls when processing the DestNetwork parameter. Exploiting this vulnerabilit...