Skip to content
Sign in
Not rated

CVE-2021-20132 Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can…

Description

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).

Affected products and versions

Product Affected versions Fixed in
Quagga Services on D-Link DIR-2640 Routers 1.11 earliest → 1.11B02 No fix stated

Other CVEs of Quagga Services on D-Link DIR-2640 Routers

The 3 CVEs of Quagga Services on D-Link DIR-2640 Routers →
CVE-2021-20134 Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal… Not rated CVE-2021-20133 Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal… Not rated
Track this CVE