Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2024-11068

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.
Attacker Value
Unknown

CVE-2024-11067

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password.
Attacker Value
Unknown

CVE-2024-11066

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web page.
Attacker Value
Unknown

CVE-2024-11065

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
Attacker Value
Unknown

CVE-2024-11064

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
Attacker Value
Unknown

CVE-2024-11063

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.
Attacker Value
Unknown

CVE-2024-11062

Disclosure Date: November 11, 2024 (last updated November 16, 2024)
The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.