Read the docs
TI-2021-03433 Aliases CVE-2021-20133GHSA-3398-v46q-wcp6

Path traversal in Quagga Services on D-Link DIR-2640 Routers

Priority LOW 31CWE-22Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of those files. Such sensitive information as hashed credentials, hardcoded plaintext passwords for other services, configuration files, and private keys can be disclosed in this fashion. Improper handling of filenames that identify virtual resources, such as "/dev/urandom" allows an attacker to effect a denial of service attack against the command line interfaces of the Quagga services (zebra and ripd).

Why it matters now

EPSS 0.02144 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Quagga Services on D-Link DIR-2640 Routersup to 1.11B02—No fix listedCNA
  • Quagga Services on D-Link DIR-2640 Routers Vendor— Affected up to 1.11B02 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dir-2640-us_firmware:*:*:*:*:*:*:*:*up to 1.11b02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-2640-us:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-2640-us_firmware:*:*:*:*:*:*:*:* Versions up to 1.11b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-2640-us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20133
  2. 2026-10-03 Alias added: GHSA-3398-v46q-wcp6

References

Exploit 1

  • TI-2021-03434 Path traversal in Quagga Services on D-Link DIR-2640 Routers CVSS 3.1HIGH 8.4
  • TI-2021-03432 Hard-coded credentials in Quagga Services on D-Link DIR-2640 Routers CVSS 3.1HIGH 8.8
  • TI-2021-13308 There are multiple out-of-bounds vulnerabilities in some processes of D-Link… CVSS 3.1HIGH 7.8
  • TI-2021-13309 D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. CVSS 3.1HIGH 8.1
  • TI-2021-13310 D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. CVSS 3.1MEDIUM 6.8
  • TI-2021-13307 D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. CVSS 3.1HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences