9.8

CVE-2024-11068

D-Link DSL6740C - Incorrect Use of Privileged APIs

The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Dsl6740c Firmware Version -
   Dlink ≫ Dsl6740c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.17% 0.647
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cert TW 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-648 Incorrect Use of Privileged APIs

The product does not conform to the API requirements for a function call that requires extra privileges. This could allow attackers to gain privileges by causing the function to be called incorrectly.

https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/
https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html
Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html
Third Party Advisory