CVEvulnerability
CVE-2021-34202
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-16
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remote code execution.
Affected configurations
• dlink dir-2640-us firmware 1.01b04
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34202 Exploit, Third Party Advisory
- https://www.dlink.com/en/security-bulletin/ Vendor Advisory
- https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34202 Exploit, Third Party Advisory
- https://www.dlink.com/en/security-bulletin/ Vendor Advisory