CVE-2024-45694

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Sep 16, 2024 (Sep 16, 2024)

Modified

Jun 17, 2026

Description

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

Vendors: dlink
Products: dir-x5460 firmware, dir-x4860 firmware
Weakness: CWE-121
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news2 stories

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

The Hacker NewsSep 17, 04:34 UTC · Sep 17, 2024Vulnerability in the wildCVE-2024-28991 CVE-2024-28990 CVE-2024-45694+2 CVEs

D-Link addressed three critical RCE in wireless router models

Security AffairsSep 16, 19:09 UTC · Sep 16, 2024Vulnerability in the wildCVE-2024-45694 CVE-2024-45695 CVE-2024-45697+2 CVEs