Lucene search

TwcertCVELIST:CVE-2024-6045

HistoryJun 17, 2024 - 3:12 a.m.

CVE-2024-6045 D-Link router - Hidden Backdoor

2024-06-1703:12:14

CWE-798

CWE-912

twcert

www.cve.org

d-link

backdoor

telnet

unauthorized access

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.8%

JSON

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "G403",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G415",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "G416",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R03",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R04",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R12",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R18",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M30",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "M60",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R32",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.10.02",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "E15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "R15",
    "vendor": "D-Link",
    "versions": [
      {
        "lessThan": "1.20.01",
        "status": "affected",
        "version": "earlier",
        "versionType": "custom"
      }
    ]
  }
]

References

supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398

www.twcert.org.tw/en/cp-139-7880-629f5-2.html

www.twcert.org.tw/tw/cp-132-7879-da630-1.html

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

19.8%

JSON

Related for CVELIST:CVE-2024-6045