CVE-2024-11068

The CVE-2024-11068 entry concerns the D-Link DSL6740C modem and an Incorrect Use of Privileged APIs vulnerability. Public materials describe that unauthenticated remote attackers can exploit the API to modify any user’s password, enabling access to Web, SSH, and Telnet services under that user’s ...

CVE-2024-11066

The CVE-2024-11066 entry concerns the D-Link DSL6740C modem, which is affected by an OS Command Injection vulnerability. The vulnerability allows remote attackers with administrator privileges to inject and execute arbitrary system commands via a specific web page. The available connected records...

CVE-2024-11062

The CVE-2024-11062 entry concerns a OS command injection in the D-Link DSL6740C modem. The vulnerability allows remote attackers with administrator privileges to inject and execute arbitrary system commands via specific functions exposed by SSH and Telnet. Root cause per connected sources appears...

CVE-2024-11064

The CVE-2024-11064 entry concerns the D-Link DSL6740C modem with an OS Command Injection flaw. Public documents describe an issue in the firmware where a vulnerability in the SSH/Telnet functionality allows a remote attacker with administrator privileges to inject and execute arbitrary system com...

CVE-2024-11065

The CVE-2024-11065 entry concerns the D-Link DSL6740C modem/router with an OS command injection vulnerability. According to connected sources, a remote attacker with administrator privileges can inject and execute arbitrary system commands via a specific functionality exposed by SSH and Telnet. C...

CVE-2024-11063

The CVE-2024-11063 entry concerns the D-Link DSL6740C modem, where an OS command injection flaw exists in a functionality exposed via SSH/Telnet. The vulnerability allows remote attackers with administrator privileges to inject and execute arbitrary system commands. According to the provided metr...

CVE-2024-11067

The CVE-2024-11067 entry concerns the D-Link DSL6740C modem/router. Affected component: path traversal vulnerability in the device’s resource/file handling that allows unauthenticated remote attackers to read arbitrary system files. Underlying cause: improper filtering of path elements leading to...