CVE-2024-48271

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-48271
D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem Exploit Third Party Advisory
https://www.dlink.com/en/security-bulletin/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dsl-6740c_firmware:6.tr069.20211230:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsl-6740c:-:*:*:*:*:*:*:*
History

07 May 2025, 16:06

Type Values Removed Values Added
First Time Dlink dsl-6740c Firmware
Dlink
Dlink dsl-6740c
References () https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem - () https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem - Exploit, Third Party Advisory
References () https://www.dlink.com/en/security-bulletin/ - () https://www.dlink.com/en/security-bulletin/ - Product
CPE cpe:2.3:h:dlink:dsl-6740c:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dsl-6740c_firmware:6.tr069.20211230:*:*:*:*:*:*:*

31 Oct 2024, 16:35

Type Values Removed Values Added
CWE CWE-521
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
Summary
  • (es) Se descubrió que D-Link DSL6740C v6.TR069.20211230 usa credenciales predeterminadas inseguras para el acceso de administrador, lo que posiblemente permita a los atacantes eludir la autenticación y aumentar los privilegios en el dispositivo a través de un ataque de fuerza bruta.

30 Oct 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-30 20:15

Updated : 2025-05-07 16:06

NVD link : CVE-2024-48271

Mitre link : CVE-2024-48271

CVE.ORG link : CVE-2024-48271

JSON object : View

Products Affected

dlink

  • dsl-6740c_firmware
  • dsl-6740c
CWE
CWE-521

Weak Password Requirements