CVE-2024-11067CWE-23

D-Link DSL6740C - Arbitrary File Reading through Path Traversal

High · published November 11, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01274 · 69.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2024-11-11T08:00Z
EPSS history
Timeline
  • 11 NOV 08:00Z
    D-Link DSL6740C - Arbitrary File Reading through Path Traversal
    cvelistv5