PT-2024-8170 · D Link · D-Link Dsl6740C

·

CVE-2024-11063

·

Published

2024-11-11

·

Updated

2024-11-15

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C (affected versions not specified)
Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet. This can be exploited by attackers to execute commands on the system.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09712
CVE-2024-11063

Affected Products

D-Link Dsl6740C