Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-45696

D-Link WiFi router - Hidden Functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

D-Link DIR-X4860 A1

Default version status: unaffected

  • 1.00affected
  • 1.04affected

D-Link COVR-X1870

Default version status: unaffected

  • 0 to ≤ 1.02affected

References