CVE-2024-6045

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

Score

CVSS 3.1 8.8 High

Status

Deferred - twcert@cert.org.tw

Published

2024-06-17

Last modified

2024-08-01

Weaknesses

CWE-798, CWE-912

Affected products

• E15 (D-link)
• E30 (D-link)
• G403 (D-link)
• G415 (D-link)
• G416 (D-link)
• M18 (D-link)
• M30 (D-link)
• M32 (D-link)
• M60 (D-link)
• R03 (D-link)
• R04 (D-link)
• R12 (D-link)
• R15 (D-link)
• R18 (D-link)
• R32 (D-link)
• E15 Firmware (Dlink)
• E30 Firmware (Dlink)
• G403 Firmware (Dlink)
• G415 Firmware (Dlink)
• G416 Firmware (Dlink)
• M18 Firmware (Dlink)
• M30 Firmware (Dlink)
• M32 Firmware (Dlink)
• M60 Firmware (Dlink)
• R03 Firmware (Dlink)
• R04 Firmware (Dlink)
• R12 Firmware (Dlink)
• R15 Firmware (Dlink)
• R18 Firmware (Dlink)
• R32 Firmware (Dlink)

References

• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
• https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html
• https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html