Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-45698

D-Link WiFi router - OS Command Injection

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Dlink
Products
Dir-4860 A1 Dir-x4860 Dir-x4860 Firmware
CVE-2024-45697

D-Link WiFi router - Hidden Functionality

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Dlink
Products
Dir-4860 A1 Dir-x4860 Dir-x4860 Firmware