critical9.8
CVE-2024-45697
Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in.
Impact
Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-X4860 Firmware | Versions 1.00, 1.04 |