CVE-2024-45697

—

CVSS 3.1

9.8 critical

EPSS

1%p62

Published

Sep 16, 2024 (Sep 16, 2024)

Modified

Jun 17, 2026

Description

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

Vendors: dlink
Products: dir-x4860 firmware
Weakness: CWE-912
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news2 stories

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

The Hacker NewsSep 17, 04:34 UTC · Sep 17, 2024Vulnerability in the wildCVE-2024-28991 CVE-2024-28990 CVE-2024-45694+2 CVEs

D-Link addressed three critical RCE in wireless router models

Security AffairsSep 16, 19:09 UTC · Sep 16, 2024Vulnerability in the wildCVE-2024-45694 CVE-2024-45695 CVE-2024-45697+2 CVEs