high8.8
CVE-2024-6045
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor.
Impact
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
- https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html
- https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html
- https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
- https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html
- https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html