The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through this vulnerability and attempt to log in to the device using the default password.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/ | |
| https://www.twcert.org.tw/en/cp-139-8233-903d9-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-8226-0b07b-1.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Nov 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
15 Nov 2024, 18:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dsl6740c Firmware
Dlink dsl6740c Dlink |
|
| CPE | cpe:2.3:o:dlink:dsl6740c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:dlink:dsl6740c:-:*:*:*:*:*:*:* |
|
| References | () https://www.twcert.org.tw/en/cp-139-8233-903d9-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-8226-0b07b-1.html - Third Party Advisory |
11 Nov 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-11 08:15
Updated : 2024-11-24 15:15
NVD link : CVE-2024-11067
Mitre link : CVE-2024-11067
JSON object : View
Products Affected
dlink
- dsl6740c_firmware
- dsl6740c
CWE
No CWE.