CVE-2024-45696: falha de alta gravidade em D-Link COVR-X1870
D-Link WiFi router - Hidden Functionality
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.6%
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — D-Link COVR-X1870
No mesmo produto, das mais perigosas para as menos.
CVE-2024-45694CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.9%CVE-2024-45695CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.6%CVE-2024-45698CRITICALD-Link WiFi router - OS Command InjectionEPSS 1.1%CVE-2024-45697CRITICALD-Link WiFi router - Hidden FunctionalityEPSS 1.0%