Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote malicious user to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
dlink dir-2640-us_firmware |
Vulmon