Description
Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.
Scores
CVSS v3
9.8
EPSS
0.0221
EPSS Percentile
84.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-912
Status
published
Products (2)
dlink/dir-x4860_firmware
1.00
dlink/dir-x4860_firmware
1.04
Published
Sep 16, 2024
Tracked Since
Feb 18, 2026