ZDI-CAN-19550: ZDI-23-545: D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19550?
The severity of ZDI-CAN-19550 is significant due to the potential for arbitrary code execution by network-adjacent attackers.
How do I fix ZDI-CAN-19550?
To mitigate ZDI-CAN-19550, update your D-Link DIR-2640 router firmware to the latest version provided by D-Link.
Who is affected by ZDI-CAN-19550?
Users of D-Link DIR-2640 routers with vulnerable firmware versions are susceptible to the ZDI-CAN-19550 vulnerability.
What type of vulnerability is ZDI-CAN-19550?
ZDI-CAN-19550 is a code execution vulnerability that can be exploited by bypassing authentication mechanisms.
Is authentication bypassed in ZDI-CAN-19550?
Yes, ZDI-CAN-19550 allows attackers to exploit the vulnerability even if authentication is required.