PT-2021-20399 · D Link · D-Link Ac2600

Published 2021-06-16 · Updated 2024-02-14 · CVE-2021-34202

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link AC2600(DIR-2640) version 1.01B04

Description: The issue involves multiple out-of-bounds vulnerabilities in certain processes. These vulnerabilities can elevate ordinary permissions to administrator permissions, leading to local arbitrary code execution. An attacker may combine these vulnerabilities with others to achieve remote code execution.

Recommendations: For D-Link AC2600(DIR-2640) version 1.01B04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-34202

Affected Products

D-Link Ac2600

References · 7

• 🔥 https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34202 · Exploit
• https://dlink.com/en/security-bulletin · Vendor Advisory
• http://d-link.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34202 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34202 · Vendor Advisory
• http://dir-2640-us.com · Note
• https://t.me/cvenotify/16479 · Telegram Post