CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet…

Critical · published July 30, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

🚨 A shocking discovery: hardcoded credentials in D-Link's Telnet service let attackers waltz right in! 🔥 Think of it like a hotel with a master key left lying around for anyone to find — any intruder can stroll into any room and access all your secrets. 🏨 With this vulnerability, an attacker could log in remotely and execute arbitrary commands, potentially compromising the entire network. It's like handing over the keys to your digital kingdom — they could steal sensitive information or even take control of connected devices!

Put simply

Think of it like a hotel with a master key left lying around for anyone to find — any intruder can stroll into any room and access all your secrets. 🏨 This vulnerability allows attackers to exploit hardcoded credentials in the Telnet service of D-Link DIR-860L REVA, enabling unauthorized remote access to the device and execution of commands.

What to do

With this vulnerability, an attacker could log in remotely and execute arbitrary commands, potentially compromising the entire network. It's like handing over the keys to your digital kingdom — they could steal sensitive information or even take control of connected devices! Upgrade your firmware immediately to version 1.10..B04 and disable the Telnet service if it's not needed. Additionally, review your network settings and ensure that strong, unique passwords are in place. You've got this! Follow these steps, and you’ll have your network fortified in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00776 · 55.3th percentile
Published
2024-07-30T00:00Z
EPSS history
Timeline
  • 30 JUL 00:00Z
    In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet…
    cvelistv5