CVE-2024-48271 - D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack

Back Back to CVE browser

HIGH

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack

Published Oct 30, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.92%

Description

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack.

Affected products

Vendor D-Link Product Dsl6740c Firmware Default
unknown
Affected
- 6.tr069.20211230

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
D-Link	Dsl6740c Firmware	unknown	Affected 6.tr069.20211230

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-521

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-42976
Advisory
https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem
ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-42976		Advisory
https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53fddc27409ad#1--predictable-administrator-credentials-in-d-link-dsl6740c-modem		ExploitThird Party Advisory
https://www.dlink.com/en/security-bulletin/		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 30, 2024

Updated Oct 31, 2024

Reserved Oct 8, 2024

Link CVE-2024-48271

CISA Vulnrichment

Updated Oct 31, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-48271

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 30, 2024

Updated Oct 31, 2024

Link EUVD-2024-42976

GitHub

No data