Hard-coded credentials in Quagga Services on D-Link DIR-2640 Routers
Priority MEDIUM 45CWE-798Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).
Why it matters now
EPSS 0.0443 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Quagga Services on D-Link DIR-2640 Routers | up to 1.11B02 | — | No fix listed | CNA |
- Quagga Services on D-Link DIR-2640 Routers Vendor— Affected up to 1.11B02 Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dir-2640-us_firmware:*:*:*:*:*:*:*:* | up to 1.11b02 | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dir-2640-us:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dir-2640-us_firmware:*:*:*:*:*:*:*:* Versions up to 1.11b02 Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dir-2640-us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-20132
- 2026-10-03 Alias added: GHSA-8v3c-9hr5-hqm7
References
More D-Link Japan K.K. Dir-2640-us Firmware vulnerabilities
- TI-2021-03434 Path traversal in Quagga Services on D-Link DIR-2640 Routers CVSS 3.1HIGH 8.4
- TI-2021-13308 There are multiple out-of-bounds vulnerabilities in some processes of D-Link… CVSS 3.1HIGH 7.8
- TI-2021-13309 D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. CVSS 3.1HIGH 8.1
- TI-2021-13310 D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. CVSS 3.1MEDIUM 6.8
- TI-2021-13307 D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. CVSS 3.1HIGH 7.1
- TI-2021-03433 Path traversal in Quagga Services on D-Link DIR-2640 Routers CVSS 3.1MEDIUM 6.1
Sources
- CVE-2021-20132 · CVE Program
- CVE-2021-20132 · NVD
- FIRST EPSS
- GHSA-8v3c-9hr5-hqm7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences