U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2023-32152

Change History

New CVE Received by NIST 5/02/2024 10:15:19 PM

Action Type Old Value New Value
Added CVSS V3

								
							
							
						
Zero Day Initiative AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Added CWE

								
							
							
						
Zero Day Initiative CWE-303
Added Description

								
							
							
						
D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the web management interface, which listens on TCP port 80 by default. A specially crafted login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-19549.
Added Reference

								
							
							
						
Zero Day Initiative https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323 [No types assigned]
Added Reference

								
							
							
						
Zero Day Initiative https://www.zerodayinitiative.com/advisories/ZDI-23-544/ [No types assigned]