Skip to main content

Dir X4860 Firmware

5 CVEs product

Monthly

CVE-2024-45698 Sep 16, 07:15 CRITICAL Act Now

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection D-Link Dir X4860 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2024-45697 Sep 16, 07:15 CRITICAL Act Now

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass D-Link Dir X4860 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-45696 Sep 16, 07:15 HIGH This Week

Certain models of D-Link wireless routers contain hidden functionality. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure D-Link Dir X4860 Firmware Covr X1870 Firmware
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2024-45695 Sep 16, 07:15 CRITICAL Act Now

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow D-Link Stack Overflow Dir X4860 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2024-45694 Sep 16, 07:15 CRITICAL Act Now

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow D-Link Stack Overflow Dir X5460 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
1.9%
EPSS 1% CVSS 9.8
CRITICAL Act Now

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection D-Link Dir X4860 Firmware
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass D-Link Dir X4860 Firmware
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Certain models of D-Link wireless routers contain hidden functionality. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure D-Link Dir X4860 Firmware +1
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow D-Link +2
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow D-Link +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy