Hidden Functionality in D-Link Routers Exposes Telnet Service

CVE-2024-45696

Summary

Certain models of D-Link wireless routers expose a hidden vulnerability that allows unauthorized access through the telnet service. By sending crafted packets to the router's web service, an attacker can activate the telnet service, which is typically disabled by default. Once enabled, the telnet service permits login using hard-coded credentials, posing a significant risk if an attacker gains access to the local network. This vulnerability underscores the importance of securing administrative interfaces and ensuring that default configurations prevent unauthorized access.

References