D-Link Corp. DIR-2640

Name: D-Link Corp. DIR-2640
Brand: D-Link Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical1high1medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-32152US	—	28.9% (98th)	—	no fix	2024-05-03	2 versions
CVE-2023-32148US	—	28.9% (98th)	—	no fix	2024-05-03	2 versions
CVE-2023-32150US	—	26.9% (98th)	—	no fix	2024-05-03	2 versions
CVE-2023-32153US	—	23.4% (98th)	—	no fix	2024-05-03	2 versions
CVE-2023-32151US	—	1.80% (78th)	—	no fix	2024-05-03	2 versions
CVE-2023-32147US	—	1.80% (78th)	—	no fix	2024-05-03	2 versions
CVE-2024-5293US	—	1.61% (76th)	—	no fix	2024-05-23	≤ 1.11B02_BETA02
CVE-2023-32149US	—	1.24% (69th)	—	no fix	2024-05-03	2 versions
CVE-2021-34203US	high8.1OT elevated	1.20% (68th)	—	no fix	2021-06-16	≤ 1.01B04
CVE-2021-34204US	medium6.8	1.11% (66th)	—	no fix	2021-06-16	≤ 1.01B04

showing 10 of 11

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-303Incorrect Implementation of Authentication Algorithm2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.