CVE-2024-45697CWE-912

D-Link WiFi router - Hidden Functionality

Critical · published September 16, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

🚨 Surprise! Certain D-Link wireless routers come with a hidden feature that lets attackers waltz right into your home network through telnet — and they don’t even need a key! 🔥 Think of it like a hotel room that has a secret entrance the staff forgot to lock. If an unauthorized guest knows about this hidden door, they can stroll in and cause chaos without anyone noticing! This vulnerability allows remote hackers to log in and execute OS commands with hard-coded credentials. That means they could change your network settings, intercept traffic, or even access connected devices — an absolute nightmare for your security!

Put simply

Think of it like a hotel room that has a secret entrance the staff forgot to lock. If an unauthorized guest knows about this hidden door, they can stroll in and cause chaos without anyone noticing! The flaw resides in specific models of D-Link routers where the telnet service is unintentionally enabled when the WAN port is connected, allowing unauthorized access via unchangeable credentials.

What to do

This vulnerability allows remote hackers to log in and execute OS commands with hard-coded credentials. That means they could change your network settings, intercept traffic, or even access connected devices — an absolute nightmare for your security! Immediate actions include disabling the telnet service in your router settings and changing the default login credentials if possible. Ensure your firmware is updated to the latest version to mitigate this risk. You’ve got this! By following these steps, you’ll lock up that hidden entryway and keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01028 · 63.3th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2024-09-16T06:48Z
EPSS history
Timeline
  • 16 SEP 06:48Z
    D-Link WiFi router - Hidden Functionality
    cvelistv5