Remote Administrative Access Vulnerability in D-Link Router

CVE-2021-20132

What is CVE-2021-20132?

The Quagga Services on D-Link DIR-2640 routers prior to version 1.11B02 utilize default hard-coded credentials. This vulnerability can enable an unauthorized remote attacker to breach security, gaining administrative access to important services like zebra or ripd, both operating with elevated privileges. Such access allows the attacker to manipulate the router's configurations and functions, potentially leading to further exploits or disruptions.

References