Wireless Routers Vulnerable to Command Injection Attacks

CVE-2024-45698

Summary

Certain D-Link wireless router models exhibit a significant vulnerability due to inadequate user input validation in their telnet service. This flaw allows unauthenticated attackers to exploit hard-coded credentials, gaining remote access to the devices. Once accessed, attackers can execute arbitrary operating system commands, potentially compromising the entire device and any connected network resources. Prompt attention to this issue is essential for safeguarding network security.

References