Skip to content
OpenAdvisories
Critical WID-SEC-2024-3395 7 CVEs

D-LINK Router DSL6740C (EoL): Mehrere Schwachstellen

Published Nov 10, 2024 · Updated Nov 12, 2024 · Revision 2 · de-DE

Vendor: D-Link Product: Router

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen im D-LINK DSL6740C ausnutzen, um beliebigen Code mit administrativen Rechten auszuführen, Administratorrechte zu erlangen oder vertrauliche Informationen offenzulegen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 7

  • Critical 9.8
    CVE-2024-11068

    D-Link DSL6740C - Incorrect Use of Privileged APIs

    The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.

    D-Link DSL6740C Network devices
  • High 7.5
    CVE-2024-11067

    D-Link DSL6740C - Arbitrary File Reading through Path Traversal

    The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attack…

    D-Link DSL6740C Network devices
  • High 7.2
    CVE-2024-11062

    D-Link DSL6740C - OS Command Injection

    The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

    D-Link DSL6740C Network devices
  • High 7.2
    CVE-2024-11063

    D-Link DSL6740C - OS Command Injection

    The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

    D-Link DSL6740C Network devices
  • High 7.2
    CVE-2024-11064

    D-Link DSL6740C - OS Command Injection

    The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

    D-Link DSL6740C Network devices
  • High 7.2
    CVE-2024-11065

    D-Link DSL6740C - OS Command Injection

    The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

    D-Link DSL6740C Network devices
  • High 7.2
    CVE-2024-11066

    D-Link DSL6740C - OS Command Injection

    The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page.

    D-Link DSL6740C Network devices

Revision history

  1. #2

    Referenz(en) aufgenommen: SAP10414

  2. #1

    Initiale Fassung

References