CVE-2024-45696

Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device.

• CWE-912

• https://www.twcert.org.tw/en/cp-139-8087-c3e70-2.htmlThird Party Advisory
• https://www.twcert.org.tw/tw/cp-132-8086-93ed5-1.htmlThird Party Advisory

Published

Sep 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45690A flaw was found in Moodle. Additional checks were required …7.5
• CVE-2024-45691A flaw was found in Moodle. When restricting access to a les…5.4
• CVE-2024-45692Webmin before 2.202 and Virtualmin before 7.20.2 allow a net…7.5
• CVE-2024-45693Users logged into the Apache CloudStack's web interface can …8.8
• CVE-2024-45694The web service of certain models of D-Link wireless routers…9.8
• CVE-2024-45695The web service of certain models of D-Link wireless routers…9.8
• CVE-2024-45697Certain models of D-Link wireless routers have a hidden func…9.8
• CVE-2024-45698Certain models of D-Link wireless routers do not properly va…9.8
• CVE-2024-45699The endpoint /zabbix.php?action=export.valuemaps suffers fro…5.4
• CVE-2024-4570The Elementor Addon Elements plugin for WordPress is vulnera…5.4
• CVE-2024-45700Zabbix server is vulnerable to a DoS vulnerability due to un…6.5
• CVE-2024-45709SolarWinds Web Help Desk was susceptible to a local file rea…5.5