PT-2022-6580 · D Link · D-Link Dir-2640

Published 2022-12-22 · Updated 2025-08-06 · CVE-2023-32151

Positive Technologies (AI Summary)

CVSS v2.0

7.4

High

Base vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640 routers (affected versions not specified)

Description The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with insufficient validation of user-supplied input before it is used to execute a system call when handling the DestNetwork parameter. This can be exploited by a remote attacker to bypass security restrictions and execute arbitrary code. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed, allowing an attacker to execute code in the context of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

BDU:2023-02608

CVE-2023-32151

ZDI-23-543

Affected Products

D-Link Dir-2640

References · 7

• https://osv.dev/vulnerability/CVE-2023-32151 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-543 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32151 · Security Note
• https://bdu.fstec.ru/vul/2023-02608 · Security Note
• https://twitter.com/CVEnew/status/1788296025960325630 · Twitter Post
• https://t.me/cveNotify/131080 · Telegram Post