Threat Investigation
Request a demo

CVE-2024-45696

High

Description

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

SeverityHigh
CVSS8.8
Exploit probability—
ProductDlink Covr-x1870 Firmware
PublishedSep 16, 2024
First seenSep 16, 2024
Weakness typeCWE-912CWE-912

How to fix

Update
  • dlink covr-x1870_firmware1.03b01 or later

Affected products

ProductAffected versionsFixed in
dlink covr-x1870_firmwarev < 1.03b011.03b01
dlink dir-x4860_firmware1.00, 1.04—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.