CVE-2020-9277: Critical severity d-link dsl-2640b firmware vulnerability

Published Apr 20, 2020

Updated

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.

Affected Software

2 affected components

Dlink Dsl-2640b Firmware=eu_4.01b

Dlink Dsl-2640b

Event History

Apr 20, 2020

CVE Published

via MITRE·10:40 PM

Data Sourced

via MITRE·10:40 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-9277?

CVE-2020-9277 is rated as a high severity vulnerability due to its ability to allow unauthorized administrative access.

How do I fix CVE-2020-9277?

To fix CVE-2020-9277, update the D-Link DSL-2640B firmware to the latest version provided by the manufacturer.

What type of devices are affected by CVE-2020-9277?

CVE-2020-9277 specifically affects D-Link DSL-2640B B2 EU_4.01B devices.

What can an attacker do with CVE-2020-9277?

An attacker exploiting CVE-2020-9277 can bypass authentication and perform administrative tasks, including changing the admin password.

Is CVE-2020-9277 relevant for recent firmware versions?

CVE-2020-9277 is not relevant for recent firmware versions if they have been properly updated to address this vulnerability.