dsl-2640b firmware vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote malicious users to hijack the authentication of administrators for requests that change the administrator password via the sysPassword parameter.

Dlink Dsl-2640b Firmware 4.00 Dlink Dsl-2640b -

1 EDB exploit

An issue exists on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated exfiltration of administrative credentials.

Dlink Dsl-2640b Firmware Eu 4.01b

An issue exists on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device.

Dlink Dsl-2640b Firmware Eu 4.01b

An issue exists on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.

Dlink Dsl-2640b Firmware Eu 4.01b

An issue exists on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the device's web servers, is vulnerable to a remotely exploitable stack-based buffer overflow. Unauthenticated exploitation is possible by combining this ...

Dlink Dsl-2640b Firmware Eu 4.01b

An issue exists on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an unauthenticated URL.

Dlink Dsl-2640b Firmware Eu 4.01b

An issue exists on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice.

D-link Dsl-2640b Firmware E1 Eu 1.01

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook