Dlink Dsl-2640b Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dsl-2640b Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-9275 — CVSS 9.8 (critical): An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote, unauthenticated…
• CVE-2020-9277 — CVSS 9.8 (critical): An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one…
• CVE-2020-9279 — CVSS 9.8 (critical): An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows management-interface login with high…
• CVE-2020-9278 — CVSS 9.1 (critical): An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its default configuration by accessing an…
• CVE-2020-9276 — CVSS 8.8 (high): An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the…
• CVE-2012-1308 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the…