Vulnerabilities

TI-2023-15456 CVE-2023-32153 · GHSA-49vc-hcf9-97jc

OS command injection in D-Link DIR-2640

MEDIUM 54

D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.26892 Published 2024-05-03 No fix listed CWE-78

TI-2023-15455 CVE-2023-32152 · GHSA-xq9g-8773-5hrq

MEDIUM 52

D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.28878 Published 2024-05-03 No fix listed CWE-303

TI-2023-15454 CVE-2023-32151 · GHSA-q6hp-h24j-qjr9

LOW 36

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.01796 Published 2024-05-03 No fix listed CWE-78

TI-2023-15453 CVE-2023-32150 · GHSA-7g76-pmjp-4wm3

MEDIUM 54

D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.26892 Published 2024-05-03 No fix listed CWE-78

TI-2023-15452 CVE-2023-32149 · GHSA-vxm9-627c-qcvh

MEDIUM 43

D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0124 Published 2024-05-03 No fix listed CWE-121

TI-2023-15451 CVE-2023-32148 · GHSA-qjfm-3pc3-mmj2

MEDIUM 52

D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.28878 Published 2024-05-03 No fix listed CWE-303

TI-2023-15450 CVE-2023-32147 · GHSA-x53g-896j-v24h

LOW 36

D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.01796 Published 2024-05-03 No fix listed CWE-78