PT-2022-6581 · D Link · D-Link Dir-2640

Published 2022-12-21 · Updated 2025-08-06 · CVE-2023-32148

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640 versions (affected versions not specified)

Description This issue allows network-adjacent attackers to bypass authentication on affected D-Link DIR-2640 routers. The flaw exists within the web management interface, which listens on TCP port 80 by default. A crafted XML element in the login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this to bypass authentication on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-303

Related Identifiers

BDU:2023-02609

CVE-2023-32148

ZDI-23-540

Affected Products

D-Link Dir-2640

References · 6

• https://osv.dev/vulnerability/CVE-2023-32148 · Vendor Advisory
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-540 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32148 · Security Note
• https://bdu.fstec.ru/vul/2023-02609 · Security Note
• https://t.me/cveNotify/131077 · Telegram Post