PT-2024-4141 · D Link · D-Link Wireless Routers
Raymond
·
Published
2024-06-17
·
Updated
2024-07-07
·
CVE-2024-6045
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link wireless routers (affected versions not specified)
Description
The issue is related to an undisclosed factory testing backdoor in certain models of D-Link wireless routers. This backdoor allows unauthenticated attackers on the local area network to enable the Telnet service by accessing a specific URL and log in using the administrator credentials obtained from analyzing the firmware. The backdoor is believed to have been used for automating device testing during production.
Recommendations
As a temporary workaround, consider disabling the Telnet service on the device until a patch is available.
Restrict access to the device from the local area network to minimize the risk of exploitation.
Avoid using the default administrator credentials for the device; change them to unique, strong credentials if possible.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Hidden Functionality
Path traversal
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
D-Link Wireless Routers