Configuration Reset Vulnerability in D-Link DSL-2640B Devices
CVE-2020-9278

9.1CRITICAL

Key Information:

Vendor

D-Link
Status
Dsl-2640b Firmware
Vendor
CVE Published:
20 April 2020

What is CVE-2020-9278?

A vulnerability exists in D-Link DSL-2640B B2 EU_4.01B devices that allows an unauthorized user to reset the device to its factory settings by simply accessing a specific unauthenticated URL. This flaw poses significant risks as it can lead to service disruption and potential reconfiguration of device settings, making it critical for users to apply the necessary security patches and restrict access to sensitive interfaces.

References

https://www.dlink.com/en/security-bulletin
x_refsource_MISC
https://raelize.com/posts/d-link-dsl-2640b-security-advis...
x_refsource_MISC
https://raelize.com/advisories/CVE-2020-9278_D-Link-DSL-2...
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-9278 : Configuration Reset Vulnerability in D-Link DSL-2640B Devices