CVE-2023-32150

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-32150
D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the PrefixLen parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-19547.
CVSS

No CVSS.

References
Link Resource
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 Product Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-542/ Third Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 Product Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-542/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-2640:-:*:*:*:*:*:*:*
History

06 Aug 2025, 14:17

Type Values Removed Values Added
References () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 - () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 - Product, Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-23-542/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-542/ - Third Party Advisory
CPE cpe:2.3:h:dlink:dir-2640:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:*:*:*:*:*:*:*
First Time Dlink
Dlink dir-2640
Dlink dir-2640 Firmware

18 Sep 2024, 19:15

Type Values Removed Values Added
Summary D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the PrefixLen parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19547. D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the PrefixLen parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-19547.

03 May 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 02:15

Updated : 2025-08-06 14:17

NVD link : CVE-2023-32150

Mitre link : CVE-2023-32150

JSON object : View

Products Affected

dlink

  • dir-2640
  • dir-2640_firmware
CWE

No CWE.