Olivia Fraser

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote attacker to gain administrative access to the zebra or ripd services, which are running with root privileges on the router. This is due to the use of default hard-coded credentials in Quagga Services. The attacker can access these services as the "admin" user with UID 0. Recommendations: For D-Link DIR-2640 versions less than or equal to 1.11B02, consider changing the default credentials for the zebra and ripd services to prevent unauthorized access. As a temporary workaround, restrict access to these services until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, enabling them to read all or some of the contents of those files. This can lead to the disclosure of sensitive information, including hashed credentials, hardcoded plaintext passwords for other services, configuration files, and private keys. Additionally, improper handling of filenames that identify virtual resources, such as "/dev/urandom", can allow an attacker to effect a denial of service attack against the command line interfaces of the Quagga services (zebra and ripd). Recommendations: For D-Link DIR-2640 versions less than or equal to 1.11B02, consider restricting access to the Quagga services until a patch is available. As a temporary workaround, consider disabling the setting of the "message of the day" banner to prevent an attacker from reading sensitive files. Restrict access to virtual resources, such as "/dev/urandom", to minimize the risk of a denial of service attack against the command line interfaces of the Quagga services.

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote, authenticated attacker to exploit an absolute path traversal vulnerability in Quagga Services. This enables the attacker to set an arbitrary file on the router's filesystem as the log file used by Quagga services, such as `zebra` or `ripd`. By appending log messages to a shell script on the router's filesystem, an attacker can achieve remote code execution. This can be leveraged to obtain a remote, unauthenticated root shell on the device. Recommendations: For D-Link DIR-2640 versions less than or equal to 1.11B02, as a temporary workaround, consider restricting access to the Quagga Services until a patch is available. Avoid using the vulnerable Quagga services to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.