ZDI-CAN-19547: ZDI-23-542: D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19547?
The severity of ZDI-CAN-19547 is high due to the potential for arbitrary code execution.
How do I fix ZDI-CAN-19547?
To fix ZDI-CAN-19547, you should update the D-Link DIR-2640 firmware to the latest version provided by the manufacturer.
Who is affected by ZDI-CAN-19547?
The D-Link DIR-2640 router users with outdated firmware are affected by ZDI-CAN-19547.
Can ZDI-CAN-19547 be exploited remotely?
ZDI-CAN-19547 requires network-adjacent access to exploit, indicating it cannot be exploited remotely without local network presence.
What are the implications of ZDI-CAN-19547?
The implications of ZDI-CAN-19547 include potential unauthorized access and control of the affected router.