CVE-2024-45697

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - twcert@cert.org.tw

Published

2024-09-16

Last modified

2024-09-16

Weaknesses

CWE-912

Affected products

• Dir-x4860 A1 (D-link)
• Dir-4860 A1 (Dlink)
• Dir-x4860 Firmware (Dlink)

References

• https://www.twcert.org.tw/en/cp-139-8089-32df6-2.html
• https://www.twcert.org.tw/tw/cp-132-8088-590ed-1.html