Dlink Covr 2600R vulnerabilities
2 vulnerabilities
Known vulnerabilities in Dlink Covr 2600R, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-20432dlinkcovr-2600r_firmware+1
EPSS score3.93%
D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration.CVE-2024-44674dlinkcovr-2600r_firmwareEPSS score4.15%
D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub_24E28, the HTTP_REFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src.