{"id":"CVE-2024-6045","state":"PUBLISHED","title":"D-Link router - Hidden Backdoor","description":"Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.","publishedAt":"2024-06-17T03:12:14.137Z","updatedAt":"2024-08-01T21:25:03.244Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"twcert"},"assigner":"twcert","products":["D-Link G403","D-Link G415","D-Link G416","D-Link M18","D-Link R03","D-Link R04","D-Link R12","D-Link R18","D-Link E30","D-Link M30","D-Link M32","D-Link M60","D-Link R32","D-Link E15","D-Link R15"],"affected":[{"vendor":"D-Link","product":"G403","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"G415","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"G416","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"M18","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R03","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R04","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R12","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R18","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"E30","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M30","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M32","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M60","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"R32","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"E15","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.20.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R15","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.20.01","versionType":"custom"}]}],"references":["https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html","https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html","https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398"],"weaknesses":["CWE-912","CWE-798"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/6xxx/CVE-2024-6045.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-6045","state":"PUBLISHED","datePublished":"2024-06-17T03:12:14.137Z","dateUpdated":"2024-08-01T21:25:03.244Z","assignerShortName":"twcert","assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateReserved":"2024-06-17T01:58:49.676Z"},"containers":{"cna":{"title":"D-Link router - Hidden Backdoor","descriptions":[{"lang":"en","value":"Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware."}],"affected":[{"vendor":"D-Link","product":"G403","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"G415","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"G416","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"M18","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R03","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R04","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R12","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R18","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.01","versionType":"custom"}]},{"vendor":"D-Link","product":"E30","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M30","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M32","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"M60","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"R32","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.10.02","versionType":"custom"}]},{"vendor":"D-Link","product":"E15","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.20.01","versionType":"custom"}]},{"vendor":"D-Link","product":"R15","defaultStatus":"unaffected","versions":[{"version":"earlier","status":"affected","lessThan":"1.20.01","versionType":"custom"}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html","tags":["third-party-advisory"]},{"url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398","tags":["vendor-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-912","description":"CWE-912: Hidden Functionality","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-798","description":"CWE-798: Use of Hard-coded Credentials","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"twcert","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateUpdated":"2024-06-17T03:12:14.137Z"},"datePublic":"2024-06-17T03:12:00.000Z","impacts":[{"capecId":"CAPEC-190","descriptions":[{"lang":"en","value":"CAPEC-190 Reverse Engineer an Executable to Expose Assumed Hidden Functionality"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Please update firmware of following models to 1.10.01 or later version：<br>G403, G415, G416, M18, R03, R04, R12, R18<br><br>Please update firmware of following models to 1.10.02 or later version： <br>E30, M30, M32, M60, R32<br><br>Please update firmware of following models to 1.20.01 or later version：<br>E15, R15<br>"}],"value":"Please update firmware of following models to 1.10.01 or later version：\nG403, G415, G416, M18, R03, R04, R12, R18\n\nPlease update firmware of following models to 1.10.02 or later version： \nE30, M30, M32, M60, R32\n\nPlease update firmware of following models to 1.20.01 or later version：\nE15, R15"}],"source":{"advisory":"TVN-202406013","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"dlink","product":"g403_firmware","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.10.01","versionType":"custom"}],"cpes":["cpe:2.3:o:dlink:r12_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:r18_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:r04_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:r03_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:m18_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:g416_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:g415_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:g403_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"dlink","product":"e30_firmware","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.10.02","versionType":"custom"}],"cpes":["cpe:2.3:o:dlink:r32_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:m60_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:m32_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:m30_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:e30_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"dlink","product":"e15_firmware","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.20.01","versionType":"custom"}],"cpes":["cpe:2.3:o:dlink:r15_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:dlink:e15_firmware:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-22T03:55:29.791651Z","id":"CVE-2024-6045","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-24T13:16:42.373Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html","tags":["third-party-advisory","x_transferred"]},{"url":"https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html","tags":["third-party-advisory","x_transferred"]},{"url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T21:25:03.244Z"}}]}}}