CVE-2024-11068
"D-Link DSL6740C Privileged API Vulnerability"
Description
The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account.
INFO
Published Date :
Nov. 11, 2024, 8:15 a.m.
Last Modified :
Nov. 24, 2024, 3:15 p.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
5.9
Exploitability Score :
3.9
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-11068.
| URL | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html | Third Party Advisory |
| https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/ |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-11068 vulnerability anywhere in the article.
-
Cybersecurity News
Palo Alto Networks Warns of GlobalProtect App Flaw with Public Exploit Code (CVE-2024-5921)
Palo Alto Networks has issued a security advisory warning of a vulnerability in its GlobalProtect app that could allow attackers to install malicious software on endpoints.The vulnerability, identifie ... Read more
-
Cybersecurity News
CISA Sounds the Alarm on Actively Exploited Apple and Oracle Zero-Days
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three actively exploited vulnerabilities affecting Apple and Oracle products. These flaws, added to CISA’ ... Read more
-
Cybersecurity News
CVE-2024-52940: AnyDesk Vulnerability Exposes User IP Addresses, PoC Published
Image: Ebrahim ShafieiA newly discovered vulnerability in popular remote desktop software AnyDesk could allow attackers to uncover users’ IP addresses, posing significant privacy risks. Security resea ... Read more
-
Cybersecurity News
FrostyGoop: New ICS Malware Exploits Modbus TCP Protocol
Recently, Palo Alto Networks has released an in-depth analysis of FrostyGoop, also known as BUSTLEBERM, a sophisticated malware targeting operational technology (OT). This malware gained attention in ... Read more
-
Cybersecurity News
CVE-2024-51503: Trend Micro Deep Security Agent RCE Vulnerability Fixed
A recently discovered vulnerability in the Trend Micro Deep Security 20 Agent could have allowed attackers to execute arbitrary code on affected machines. The vulnerability, identified as CVE-2024-515 ... Read more
-
Cybersecurity News
Analysis & PoC Exploits Released for Palo Alto Zero-Days – CVE-2024-0012 and CVE-2024-9474
Image: WatchtowrIn a recent analysis, security researcher Sonny from watchTowr unveiled the technical intricacies of two zero-day vulnerabilities affecting Palo Alto Networks’ Next-Generation Firewall ... Read more
-
BleepingComputer
D-Link urges users to retire VPN routers impacted by unfixed RCE flaw
D-Link is warning customers to replace end-of-life VPN router models after a critical unauthenticated, remote code execution vulnerability was discovered that will not be fixed on these devices. The f ... Read more
-
Cybersecurity News
CVE-2024-0012 and CVE-2024-9474: Actively Exploited Vulnerabilities Impact Palo Alto Networks PAN-OS
Palo Alto Networks has issued critical advisories regarding two actively exploited vulnerabilities in their PAN-OS software, posing significant risks to organizations relying on the platform for netwo ... Read more
-
Cybersecurity News
New Critical Vulnerabilities in Kanboard Project Management Software: Admins Urged to Patch
Two severe vulnerabilities have been discovered in Kanboard, a project management software that adheres to the Kanban methodology. Both vulnerabilities, identified by Deutsche Telekom Security GmbH, p ... Read more
-
BleepingComputer
D-Link won’t fix critical bug in 60,000 exposed EoL modems
Tens of thousands of exposed D-Link routers that have reached their end-of-life are vulnerable to a critical security issue that allows an unauthenticated remote attacker to change any user's password ... Read more
-
security.nl
Kritiek lek in D-Link modem laat remote aanvaller wachtwoord gebruiker wijzigen
Een kritiek kwetsbaarheid in een DSL-modem van D-Link maakt het mogelijk voor een ongeauthenticeerde aanvaller om op afstand het wachtwoord van elke gebruiker aan te passen en vervolgens als die gebru ... Read more
-
Cybersecurity News
CVE-2024-11068 (CVSS 9.8): Critical D-Link DSL-6740C Flaw, Immediate Replacement Advised
TWCERT/CC has issued multiple security advisories for the D-Link DSL-6740C modem, revealing a range of severe vulnerabilities that could expose users to remote attacks.The modem, which is no longer su ... Read more
The following table lists the changes that have been made to the
CVE-2024-11068 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 24, 2024
Action Type Old Value New Value Added Reference https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/ -
Initial Analysis by [email protected]
Nov. 15, 2024
Action Type Old Value New Value Changed Reference Type https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html No Types Assigned https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html Third Party Advisory Changed Reference Type https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html No Types Assigned https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html Third Party Advisory Added CPE Configuration AND OR *cpe:2.3:o:dlink:dsl6740c_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:dlink:dsl6740c:-:*:*:*:*:*:*:* -
CVE Received by [email protected]
Nov. 11, 2024
Action Type Old Value New Value Added Description The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access to Web, SSH, and Telnet services using that user’s account. Added Reference TWCERT/CC https://www.twcert.org.tw/tw/cp-132-8227-f3f3b-1.html [No types assigned] Added Reference TWCERT/CC https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html [No types assigned] Added CWE TWCERT/CC CWE-648 Added Tag TWCERT/CC unsupported-when-assigned Added CVSS V3.1 TWCERT/CC AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-11068 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-11068
weaknesses.