CVE-2024-45697

Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.

Scoring

Severity

CRITICAL

CVSS base score

9.8

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability

1.03%

CWE

CWE-912

Published

2024-09-16

Last modified

2026-03-13

Affected products

• D-Link DIR-X4860 A1
• D-Link DIR-X4860 A1

Weakness type

• CWE-912

Related vulnerabilities

• CVE-2024-20439 — A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an a
• CVE-2010-20103 — ProFTPD 1.3.3c Backdoor Command Execution
• CVE-2011-10018 — myBB 1.6.4 Backdoor Arbitrary Command Execution
• CVE-2025-34117 — Netcore / Netis Routers RCE via UDP Port 53413 Backdoor
• CVE-2026-3587 — Hidden CLI Function Allows Root Access
• CVE-2024-39754 — A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafte
• CVE-2020-12504 — Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
• CVE-2022-3203 — ORing net IAP-420(+) Hidden Functionality

Markdown version · Browse all CVEs