Hidden Functionality in D-Link Routers Exposes Telnet Service
CVE-2024-45696
What is CVE-2024-45696?
Certain models of D-Link wireless routers expose a hidden vulnerability that allows unauthorized access through the telnet service. By sending crafted packets to the router's web service, an attacker can activate the telnet service, which is typically disabled by default. Once enabled, the telnet service permits login using hard-coded credentials, posing a significant risk if an attacker gains access to the local network. This vulnerability underscores the importance of securing administrative interfaces and ensuring that default configurations prevent unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
COVR-X1870 0 <= 1.02
DIR-X4860 A1 1.00
DIR-X4860 A1 1.04
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved