CVE-2021-20132

published 2021-12-30

CVE-2021-20132: Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain…

high 8.8 CVSS 3.1

AV A AC L PR N UI N S U C H I H A H

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	dir-2640-us_firmware	<= 1.11b02	—

CWE-798