CVE-2024-45698 D-Link WiFi router - OS Command Injection

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device...

CVE-2024-45698

CVE-2024-45698 concerns certain D-Link wireless routers where the telnet service does not validate user input, allowing an unauthenticated remote attacker to log in with hard-coded credentials and inject arbitrary OS commands. The underlying root cause is improper input validation in the telnet i...

CVE-2024-45698 D-Link WiFi router - OS Command Injection

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device...

CVE-2024-45697 D-Link WiFi router - Hidden Functionality

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials...

CVE-2024-45697 D-Link WiFi router - Hidden Functionality

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials...

CVE-2024-45697

CVE-2024-45697 affects certain D-Link wireless routers (DIR-X4860, DIR-X5460, COVR-X1870). The issue is a hidden/telnet functionality where telnet is enabled when the WAN port is plugged in, allowing an unauthenticated remote attacker to log in and execute OS commands using hard-coded credentials...

CVE-2024-45696 D-Link WiFi router - Hidden Functionality

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the...

CVE-2024-45696

CVE-2024-45696 affects certain D‑Link wireless routers. According to the sources, a hidden functionality can be triggered by sending crafted packets to the device’s web service, forcibly enabling the telnet service and allowing login with hard‑coded credentials. The telnet access is restricted to...

CVE-2024-45696 D-Link WiFi router - Hidden Functionality

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the...

CVE-2024-45695 D-Link WiFi router - Stack-based Buffer Overflow

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device...

CVE-2024-45695 D-Link WiFi router - Stack-based Buffer Overflow

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device...

CVE-2024-45695

CVE-2024-45695 affects D-Link DIR-X4860 wireless routers. The web service exposes a stack-based buffer overflow in unauthenticated context, enabling remote code execution. Public sources confirm the DIR-X4860 as affected and describe the root cause as a stack-based overflow in the device’s web se...

CVE-2024-45694

CVE-2024-45694 affects certain D-Link wireless routers (e.g., DIR-X4860, DIR-X5460, COVR-X1870) via a stack-based buffer overflow in the device web service that allows unauthenticated remote code execution. The vulnerability is triggered by malformed input to the web service, enabling an attacker...

CVE-2024-45694 D-Link WiFi router - Stack-based Buffer Overflow

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device...

CVE-2024-45694 D-Link WiFi router - Stack-based Buffer Overflow

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device...

PT-2024-8611 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C version v6.TR069.20211230 Description: The issue is related to the display of the default WiFi password during network scanning, potentially allowing a remote attacker to perform a brute force attack. This could enable...

D-Link DIR-X4860 安全漏洞

The DIR-X4860 is a wireless router from China's AUO D-Link. A security vulnerability exists in the DIR-X4860 of AUO Electronic Devices Shanghai Co. An unauthorized remote attacker could exploit the vulnerability and be able to log in and execute operating system commands using hard-coded...

D-Link DIR-X4860 缓冲区错误漏洞

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO Electronic Devices Shanghai Co. The DIR-X4860 suffers from a buffer overflow vulnerability that stems from the inclusion of a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on...

D-Link DIR-X5460和D-Link DIR-X4860 安全漏洞

The D-Link DIR-X5460 and D-Link DIR-X4860 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X5460 and D-Link DIR-X4860, which stems from a contained stack-based buffer overflow vulnerability that can be exploited by an unauthenticated, remote...

OESA-2024-2134 runc security update

runc is a CLI tool for spawning and running containers according to the OCI specification. Security Fixes: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files...