CVE-2024-45696CWE-912

D-Link WiFi router - Hidden Functionality

High · published September 16, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00601 · 48.1th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2024-09-16T06:45Z
EPSS history
Timeline
  • 16 SEP 06:45Z
    D-Link WiFi router - Hidden Functionality
    cvelistv5