Lucene search
HistorySep 16, 2024 - 7:15 a.m.
CVE-2024-45698
d-link routers
unauthenticated access
os commands
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.7%
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.
Affected configurations
Node
dlinkdir-x4860_firmwareMatch1.00
ORdlinkdir-x4860_firmwareMatch1.04
dlinkdir-x4860Matcha1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dlink | dir-x4860_firmware | 1.00 | cpe:2.3:o:dlink:dir-x4860_firmware:1.00:*:*:*:*:*:*:* |
| dlink | dir-x4860_firmware | 1.04 | cpe:2.3:o:dlink:dir-x4860_firmware:1.04:*:*:*:*:*:*:* |
| dlink | dir-x4860 | a1 | cpe:2.3:h:dlink:dir-x4860:a1:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-45698 D-Link WiFi router - OS Command Injection
2024-09-16 06:52:52
cvelist
cvelist
CVE-2024-45698 D-Link WiFi router - OS Command Injection
2024-09-16 06:52:52
cve
cve
CVE-2024-45698
2024-09-16 07:15:03
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
36.7%
Related for NVD:CVE-2024-45698