Skip to main content

Dir X4860 Firmware CVE-2024-45696

HIGH
Hidden Functionality (CWE-912)
2024-09-16 twcert@cert.org.tw
Information Disclosure D-Link Dir X4860 Firmware Covr X1870 Firmware
8.8
CVSS 3.1 · Vendor: cert
Share

Severity by source

Vendor (cert) PRIMARY
8.8 HIGH
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (cert) · only source for this CVE.

CVSS VectorVendor: cert

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 16, 2024 - 07:15 cve.org
HIGH 8.8

DescriptionCVE.org

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

AnalysisAI

Certain models of D-Link wireless routers contain hidden functionality. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-912. Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device. Affected products include: Dlink Covr-X1870 Firmware, Dlink Dir-X4860 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Dir X4860 Firmware

View all
CVE-2024-45698 CRITICAL
9.8 Sep 16

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenti
CVE-2024-45697 CRITICAL
9.8 Sep 16

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN p
CVE-2024-45695 CRITICAL
9.8 Sep 16

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which
CVE-2024-45694 CRITICAL
9.8 Sep 16

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which

Same weakness CWE-912 – Hidden Functionality

View all
CVE-2026-15413 CRITICAL POC
10.0
CVE-2024-20439 CRITICAL POC
9.8
CVE-2023-24108 CRITICAL POC
9.8
CVE-2022-46997 CRITICAL POC
9.8
CVE-2022-46996 CRITICAL POC
9.8
CVE-2022-3203 CRITICAL POC
9.8
CVE-2020-12504 CRITICAL POC
9.8
CVE-2020-16204 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2024-45696 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy