CVE-2020-9277: An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks (e.g., modify the admin password) with no authentication.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dsl-2640b_firmware	—	—