CVE-2021-34201

HighCVSS 7.1

Published: 16/06/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

42th percentile - higher than 42% of all known CVEs

Summary

D-Link DIR-2640-US router version 1.01B04 is vulnerable to buffer overflow. Multiple out-of-bounds vulnerabilities exist in some processes of the device. Local ordinary users can overwrite global variables in the .bss section, causing process crashes or changes.

Risk Assessment

An attacker with local access to the router can cause instability or malfunction, potentially leading to network outages or device compromise.

Recommendation

Update the D-Link DIR-2640 firmware to the latest available version that fixes this vulnerability. If no update is available, restrict physical and remote access to trusted users only.

Other vulnerabilities in D-Link DIR-2640

CVE-2021-34204Medium
D-Link DIR-2640-US router version 1.01B04 stores the system account password in plain text. It does not use Linux user management, and all devices share the same unchangeable password. An attacker can easily log in via the serial port and gain root privileges.

Original NVD description (English source)

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640). Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS