high8.8
CVE-2024-45696
Certain models of D-Link wireless routers contain hidden functionality.
Impact
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Covr-X1870 Firmware | before 1.03b01 |
| Dlink | Dir-X4860 Firmware | Versions 1.00, 1.04 |