CVE-2024-45696 D-Link WiFi router - Hidden Functionality
Attackers on the local network can enable Telnet and log in using hard-coded credentials to gain administrative access to D-Link routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-45696?
CVE-2024-45696 is a high-severity vulnerability in D-Link COVR-X1870, published on 16 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.
Weakness: CWE-912
Which versions are affected by CVE-2024-45696?
It affects 2 products.
Products include Dlink Covr-X1870 Firmware, Dlink Dir-X4860 Firmware.
How do I fix CVE-2024-45696?
No fix has been published for CVE-2024-45696 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-45696 being exploited?
There is no known exploitation of CVE-2024-45696 in the wild and no public exploit code.
Sources
Also known as GHSA-h9rg-jfq5-wf8g.