D-Link R15 prior 1.10.01 Telnet Service backdoor

Summaryinfo

A vulnerability classified as critical has been found in D-Link G403, G415, G416, M18, R03, R04, R12, R18, E30, M30, M32, M60, R32, E15 and R15. This affects an unknown function of the component Telnet Service. This manipulation causes backdoor. This vulnerability is handled as CVE-2024-6045. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability has been found in D-Link G403, G415, G416, M18, R03, R04, R12, R18, E30, M30, M32, M60, R32, E15 and R15 and classified as critical. Affected by this vulnerability is some unknown processing of the component Telnet Service. The manipulation with an unknown input leads to a backdoor vulnerability. The CWE definition for the vulnerability is CWE-912. The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

It is possible to read the advisory at twcert.org.tw. This vulnerability is known as CVE-2024-6045 since 06/17/2024. The exploitation appears to be easy. Access to the local network is required for this attack to succeed. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/17/2024). The attack technique deployed by this issue is T1588.001 according to MITRE ATT&CK.

Upgrading to version 1.10.01 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• D-Link

Name

• E15
• E30
• G403
• G415
• G416
• M18
• M30
• M32
• M60
• R03
• R04
• R12
• R15
• R18
• R32

License

• commercial

Website

• Vendor: https://www.dlink.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion