CVE-2021-34202

Katalog CVE

CVSS 7.8 · High EPSS 3,6%

Kerentanan Out-of-bounds Write pada dlink dir-2640-us firmware. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remote code execution.

Rincian

Terbit di NVD

16 Juni 2021

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,6% peluang dieksploitasi; lebih tinggi dari 89,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dlink.com/en/security-bulletin/ advisory vendor
• https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34202 exploit · advisory pihak ketiga