CVE-2023-32152: D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability
D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the web management interface, which listens on TCP port 80 by default. A specially crafted login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system. . Was ZDI-CAN-19549.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32152?
CVE-2023-32152 is classified as a high-severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2023-32152?
To remediate CVE-2023-32152, update the D-Link DIR-2640 firmware to the latest version provided by D-Link.
Who is affected by CVE-2023-32152?
CVE-2023-32152 affects all installations of the D-Link DIR-2640 router that haven't been patched.
Can CVE-2023-32152 be exploited remotely?
CVE-2023-32152 requires network adjacency for exploitation, meaning attackers need to be on the same local network.
What are the potential consequences of CVE-2023-32152?
Exploitation of CVE-2023-32152 allows attackers to bypass authentication and gain unauthorized access to the router's settings.