D-Link Covr-2600r Firmware vulnerabilities

2 CVEs affecting D-Link Covr-2600r Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-44674, published 2024-10-07.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-44674, published 2024-10-07. Medium severity, CVSS 5.7. EPSS: 4.2% chance of exploitation in the next 30 days. D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be…
• CVE-2018-20432, published 2020-09-14. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to…