dir-4860_a1 vulnerabilities

2 known vulnerabilities in dir-4860_a1 from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DIR-X4860 A1: Use of Hard-coded Credentials

  CVE-2024-45698Sep 16, 2024D-LinkEPSS 1.14%

  Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the

• 9.8 Critical severity

  DIR-X4860 A1: Hidden Functionality

  CVE-2024-45697Sep 16, 2024D-LinkEPSS 1.03%

  Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.