Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-11068


The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.


Published

2024-11-11T08:15:08.850

Last Modified

2024-11-24T15:15:06.707

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-648

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System dlink dsl6740c_firmware - Yes
Hardware dlink dsl6740c - No

References