CVE-2021-20134

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service (zebra or ripd). Subsequent log messages will be appended to the file, prefixed by a timestamp and some logging metadata. Remote code execution can be achieved by using this vulnerability to append to a shell script on the router's filesystem, and then awaiting or triggering the execution of that script. A remote, unauthenticated root shell can easily be obtained on the device in this fashion.

• CWE-22

• https://www.tenable.com/security/research/tra-2021-44Exploit, Third Party Advisory
• https://www.tenable.com/security/research/tra-2021-44Exploit, Third Party Advisory

Published

Dec 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20129An information disclosure vulnerability exists in Draytek Vi…7.5
• CVE-2021-2013Vulnerability in the Oracle BI Publisher product of Oracle F…7.6
• CVE-2021-20130ManageEngine ADManager Plus Build 7111 contains a post-authe…8.8
• CVE-2021-20131ManageEngine ADManager Plus Build 7111 contains a post-authe…8.8
• CVE-2021-20132Quagga Services on D-Link DIR-2640 less than or equal to ver…8.8
• CVE-2021-20133Quagga Services on D-Link DIR-2640 less than or equal to ver…6.1
• CVE-2021-20135Nessus versions 8.15.2 and earlier were found to contain a l…6.7
• CVE-2021-20136ManageEngine Log360 Builds < 5235 are affected by an imprope…9.8
• CVE-2021-20137A reflected cross-site scripting vulnerability exists in the…6.1
• CVE-2021-20138An unauthenticated command injection vulnerability exists in…8.8
• CVE-2021-20139An unauthenticated command injection vulnerability exists in…8.8
• CVE-2021-2014Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9