What’s Vulnerable › Vulnerabilities

CVE-2024-6045: D-Link router - Hidden Backdoor

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-17 · updated 2026-06-17
• Weakness: CWE-798

Description

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

Affected products

• Dlink R12 Firmware: before 1.10.01 — fixed in 1.10.01
• Dlink R15 Firmware: before 1.20.01 — fixed in 1.20.01
• Dlink R32 Firmware: before 1.10.02 — fixed in 1.10.02

How to fix

Upgrade to a fixed version: Dlink R12 Firmware 1.10.01; Dlink R15 Firmware 1.20.01; Dlink R32 Firmware 1.10.02. Check the vendor advisory for mitigations.

References

• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
• https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html
• https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398
• https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html
• https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html

Get alerted when CVE-2024-6045 or the next vulnerability affects your stack