Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior

Críticas / altas1427▲ 61 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-45698	Modificada	Crítica (9.8)	1.1%	—	Dlink Dir-x4860 Firmware	16/9/2024	17/6/2026	Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.
CVE-2024-45697	Analizada	Crítica (9.8)	1.0%	—	Dlink Dir-x4860 Firmware	16/9/2024	17/6/2026	Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials.
CVE-2024-45696	Analizada	Alta (8.8)	0.60%	—	Dlink Covr-x1870 Firmware Dlink Dir-x4860 Firmware	16/9/2024	17/6/2026	Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as…
CVE-2024-45695	Analizada	Crítica (9.8)	1.6%	—	Dlink Dir-x4860 Firmware	16/9/2024	17/6/2026	The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.
CVE-2024-45694	Analizada	Crítica (9.8)	1.9%	—	Dlink Dir-x5460 Firmware Dlink Dir-x4860 Firmware	16/9/2024	17/6/2026	The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.