7.8
CVE-2021-34202
- EPSS 0.33%
- Veröffentlicht 16.06.2021 19:15:39
- Zuletzt bearbeitet 21.11.2024 06:10:00
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThere are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Dir-2640-us Firmware Version1.01b04
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.556 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.