CVE-2024-11066CWE-78

D-Link DSL6740C - OS Command Injection

High · published November 11, 2024

CVSS v3.1
7.2
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01787 · 78.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-11-11T07:49Z
EPSS history
Timeline
  • 11 NOV 07:49Z
    D-Link DSL6740C - OS Command Injection
    cvelistv5