What’s Vulnerable › Vulnerabilities

CVE-2024-11068: D-Link DSL6740C - Incorrect Use of Privileged APIs

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-11 · updated 2026-06-17
• Weakness: CWE-648

Description

The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.

Affected products

• D-Link DSL6740C: all versions

References

• https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html
• https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html
• https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/

Get alerted when CVE-2024-11068 or the next vulnerability affects your stack