CVE-2024-45698 — D-Link WiFi router - OS Command Injection
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to l…
Published: 2024-09-16 · CVSS: 9.8 · CVSS 3.1
Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7