CVE-2020-9544: D-Link DSL-2640b Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice.

Affected products

• D-Link DSL-2640b Firmware: version e1_eu_1.01 only

Published 2020-03-05. Last modified 2026-06-17.