critical9.8
CVE-2024-45698
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-code…
Impact
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-X4860 Firmware | Versions 1.00, 1.04 |