Lucene search

TwcertCVE-2024-6045

HistoryJun 17, 2024 - 4:15 a.m.

CVE-2024-6045

2024-06-1704:15:09

CWE-798

CWE-912

twcert

web.nvd.nist.gov

cve-2024-6045

d-link

backdoor

telnet

firmware analysis

authentication

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

JSON

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "G403",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G415",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G416",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R03",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R04",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R12",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M60",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  }
]

References

supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398

www.twcert.org.tw/en/cp-139-7880-629f5-2.html

www.twcert.org.tw/tw/cp-132-7879-da630-1.html

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

JSON

Related for CVE-2024-6045