[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7ykxHuyS7ltA63g8QPxo3eGAtWIUytMudBTIcKRoKE0":3,"g5a-risk:CVE-2023-32148":126},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":47,"references":48,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":46,"cisaInfo":28,"otxData":28,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":114,"notableEvents":115},"CVE-2023-32148","What is CVE-2023-32148?","D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web management interface, which listens on TCP port 80 by default. A crafted XML element in the login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system.\n. Was ZDI-CAN-19545.","D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affec...","2024-05-03T02:15:18.94","2026-06-17T05:58:11.36",6.5,"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":32},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"zdi-disclosures@trendmicro.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[],[],0.28878,[33,33,33,33,33,33,33],"Medium",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"dlink","dir-2640_firmware","1.11b02","cpe:2.3:o:dlink:dir-2640_firmware:1.11b02:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":44,"criteria":45,"vulnerable":46},"dir-2640","-","cpe:2.3:h:dlink:dir-2640:-:*:*:*:*:*:*:*",false,2,[49,55,60,62],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fsupportannouncement.us.dlink.com\u002Fannouncement\u002Fpublication.aspx?name=SAP10323","Dlink",[53,54],"Product","Vendor Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-23-540\u002F","Zerodayinitiative",[59],"Third Party Advisory",{"url":50,"source":51,"tags":61},[53,54],{"url":56,"source":57,"tags":63},[59],4,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","This incorrect implementation may allow authentication to be bypassed.","Draft","Base","Simple",1,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2023-32148? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-32148, a medium severity cyber security vulnerability from 2024. D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass V...","CVE-2023-32148, CVE-2023-32148 vulnerability, CVE-2023-32148 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, dlink security, dir-2640_firmware vulnerability, dir-2640 vulnerability","\u002Fwhat-is\u002Fcve-2023-32148",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-32148","Cybersecurity","CVE-2023-32148, CVE-2023-32148 vulnerability, CVE-2023-32148 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":103,"Negate":28,"Nodes":104},"AND",[105,110],{"Operator":106,"Negate":46,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":109,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AC690F1B-7B27-42A1-853A-EF04959FCF07",{"Operator":106,"Negate":46,"CPEMatch":111},[112],{"Vulnerable":46,"Criteria":45,"MatchCriteriaID":113,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D68A4D09-6C9A-4F3B-863D-DF612DB8DB89",[],[116],{"id":117,"eventType":118,"eventTime":119,"details":120,"label":121,"color":122},"7001ac94-4fef-4c28-88c2-14c69f453d3c","HIGH_EPSS_DELTA","2026-06-16T04:05:06.546154+00:00","Daily EPSS score increased by 0.265 on 2024-05-04","EPSS Score Increased","red",{"lastModified":11,"cacheTime":124,"version":125},1792271081199,"2.0",{"score":127,"band":128,"action":129,"scoredAt":130},35,"Low","Monitor","2026-10-16T07:01:49.047938+00:00"]