PT-2022-6582 · D Link · D-Link Dir-2640-Us

Published 2022-12-21 · Updated 2025-08-06 · CVE-2023-32147

Positive Technologies (AI Summary)

CVSS v2.0

7.4

High

Base vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US versions (affected versions not specified)

Description The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with the handling of the LocalIPAddress parameter. The lack of input validation allows an attacker to inject commands, potentially leading to remote code execution. Although authentication is required to exploit this vulnerability, it can be bypassed. The flaw exists within the HNAP1 endpoint, where a user-supplied string is used to execute a system call without proper validation, allowing an attacker to execute code in the context of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2023-02610

CVE-2023-32147

ZDI-23-539

Affected Products

D-Link Dir-2640-Us

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-32147 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32147 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-539 · Security Note
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02610 · Security Note
• https://t.me/cveNotify/131076 · Telegram Post
• https://vuldb.com/ru/?id.228080 · Note