CVE-2020-9276

An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices

published April 20, 2020

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which processes cgi requests supplied to the device's web servers, is vulnerable to a remotely exploitable stack-based buffer overflow. Unauthenticated exploitation is possible by combining this vulnerability with CVE-2020-9277.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02601 · 85.2th percentile
Published
2020-04-20T22:40Z
EPSS history
Timeline
  • 20 APR 22:40Z
    An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices
    cvelistv5