D-Link Dir-2640 Firmware vulnerabilities

9 CVEs affecting D-Link Dir-2640 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5293, published 2024-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32152, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 28.9% chance of exploitation in the next 30 days. D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640…
CVE-2023-32148, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 28.9% chance of exploitation in the next 30 days. D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640…
CVE-2023-32150, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 26.9% chance of exploitation in the next 30 days. D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-32153, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 23.4% chance of exploitation in the next 30 days. D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2022-1262, published 2022-04-11. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
CVE-2023-32151, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-32147, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2024-5293, published 2024-05-23. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations…
CVE-2023-32149, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…