CVE-2024-11064

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

Score

CVSS 3.1 7.2 High

Status

Analyzed - twcert@cert.org.tw

Published

2024-11-11

Last modified

2024-11-12

Weaknesses

CWE-78

Affected products

• Dsl6740c (D-link)
• Dsl6740c Firmware (Dlink)

References

• https://www.twcert.org.tw/en/cp-139-8230-11430-2.html
• https://www.twcert.org.tw/tw/cp-132-8223-f6da0-1.html