WID-SEC-W-2024-2146

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

D-LINK Router: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2024-09-15

Ein entfernter Angreifer kann mehrere Schwachstellen in D-LINK Router ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-45698US—OT elevated—
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log…
CVE-2024-45697US——
Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in…
CVE-2024-45696US——
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log…
CVE-2024-45695US——
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vul…
CVE-2024-45694US——
The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vul…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan