CVE-2021-20132
HIGH 8.8EPSS 4.3%
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router (i.e., as the "admin" user, UID 0).
- Affected
- Quagga Services on D-Link DIR-2640 Routers
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 8.3 HIGH
AV:A/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 4.29% chance of exploitation in the next 30 days, 91st percentile
- Published
- 2021-12-30
- Updated
- 2024-08-03