CVE-2024-6045
High
Description
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.
SeverityHigh
CVSS8.8
Exploit probability—
Product
G403
PublishedJun 17, 2024
First seenJun 17, 2024
Weakness typeCWE-912CWE-912CWE-798Hard-coded credentials
How to fix
Update
- D-Link G4031.10.01 or later
- D-Link G4151.10.01 or later
- D-Link G4161.10.01 or later
- D-Link M181.10.01 or later
- D-Link R031.10.01 or later
- D-Link R041.10.01 or later
- D-Link R121.10.01 or later
- D-Link R181.10.01 or later
- D-Link E301.10.02 or later
- D-Link M301.10.02 or later
- D-Link M321.10.02 or later
- D-Link M601.10.02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| D-Link G403 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link G415 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link G416 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link M18 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link R03 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link R04 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link R12 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link R18 | earlier ≤ v < 1.10.01 | 1.10.01 |
| D-Link E30 | earlier ≤ v < 1.10.02 | 1.10.02 |
| D-Link M30 | earlier ≤ v < 1.10.02 | 1.10.02 |
| D-Link M32 | earlier ≤ v < 1.10.02 | 1.10.02 |
| D-Link M60 | earlier ≤ v < 1.10.02 | 1.10.02 |
| D-Link R32 | earlier ≤ v < 1.10.02 | 1.10.02 |
| D-Link E15 | earlier ≤ v < 1.20.01 | 1.20.01 |
| D-Link R15 | earlier ≤ v < 1.20.01 | 1.20.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.