PT-2020-5302 · D Link · D-Link Dsl-2640B

Cristofaro Mune · Published 2020-03-30 · Updated 2020-04-28 · CVE-2020-9277

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B version EU 4.01B

Description An issue allows authentication to be bypassed when accessing cgi modules, enabling administrative tasks, such as modifying the admin password, without authentication. The vulnerability is related to weaknesses in the authentication procedure of the D-Link DSL-2640B router software, which can be exploited by a remote attacker to elevate their privileges.

Recommendations For D-Link DSL-2640B version EU 4.01B, as a temporary workaround, consider restricting access to cgi modules until a patch is available. Additionally, restrict administrative tasks to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-00064

CVE-2020-9277

Affected Products

D-Link Dsl-2640B

References · 12

• 🔥 https://raelize.com/posts/d-link-dsl-2640b-security-advisories · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-9277 · Security Note
• https://bdu.fstec.ru/vul/2021-00064 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9277 · Vendor Advisory
• https://t.me/secharvester/8892 · Telegram Post
• https://t.me/cvenotify/2950 · Telegram Post
• https://t.me/malwr/2992 · Telegram Post
• https://raelize.com/advisories/CVE-2020-9277_D-Link-DSL-2640B_CGI-Authentication-bypass_v1.0.txt · Note
• https://t.me/rnetsec/11915 · Telegram Post
• https://t.me/cvenotify/2949 · Telegram Post
• https://cxsecurity.com/cveshow/CVE-2020-9277 · Note