TI-2024-05602 Aliases CVE-2024-6045 GHSA-m8cg-23fc-95h8

D-Link router - Hidden Backdoor

MEDIUM 55CWE-798Published 2024-06-17 · Updated 2024-08-01

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.06307 93rd percentileScored 2026-11-07

Fix Fixed G403 (D-Link): 1.10.01G415 (D-Link): 1.10.01+13 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
D-Link	G403	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	G415	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	G416	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	M18	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	R03	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	R04	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	R12	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	R18	earlier to before 1.10.01	1.10.01	Patch available	CNA
D-Link	E30	earlier to before 1.10.02	1.10.02	Patch available	CNA
D-Link	M30	earlier to before 1.10.02	1.10.02	Patch available	CNA
D-Link	M32	earlier to before 1.10.02	1.10.02	Patch available	CNA
D-Link	M60	earlier to before 1.10.02	1.10.02	Patch available	CNA
D-Link	R32	earlier to before 1.10.02	1.10.02	Patch available	CNA
D-Link	E15	earlier to before 1.20.01	1.20.01	Patch available	CNA
D-Link	R15	earlier to before 1.20.01	1.20.01	Patch available	CNA

G403 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
G415 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
G416 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
M18 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
R03 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
R04 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
R12 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
R18 VendorD-Link Affected earlier to before 1.10.01 Fixed in 1.10.01 Patch available CNA
E30 VendorD-Link Affected earlier to before 1.10.02 Fixed in 1.10.02 Patch available CNA
M30 VendorD-Link Affected earlier to before 1.10.02 Fixed in 1.10.02 Patch available CNA
M32 VendorD-Link Affected earlier to before 1.10.02 Fixed in 1.10.02 Patch available CNA
M60 VendorD-Link Affected earlier to before 1.10.02 Fixed in 1.10.02 Patch available CNA
R32 VendorD-Link Affected earlier to before 1.10.02 Fixed in 1.10.02 Patch available CNA
E15 VendorD-Link Affected earlier to before 1.20.01 Fixed in 1.20.01 Patch available CNA
R15 VendorD-Link Affected earlier to before 1.20.01 Fixed in 1.20.01 Patch available CNA

CPE names CISA-ADP · 15

CPE	Versions	Role	Vendor
cpe:2.3:o:dlink:r12_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:r18_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:r04_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:r03_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:m18_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:g416_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:g415_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:g403_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:r32_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:m60_firmware::::::::	—	—	D-Link Japan K.K.

cpe:2.3:o:dlink:r12_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:r18_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:r04_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:r03_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:m18_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:g416_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:g415_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:g403_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:r32_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:m60_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.

Show 5 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:dlink:m32_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:m30_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:e30_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:r15_firmware::::::::	—	—	D-Link Japan K.K.
cpe:2.3:o:dlink:e15_firmware::::::::	—	—	D-Link Japan K.K.

cpe:2.3:o:dlink:m32_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:m30_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:e30_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:r15_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.
cpe:2.3:o:dlink:e15_firmware:*:*:*:*:*:*:*:* Versions — — ·D-Link Japan K.K.

Remediation

Fix · CNA G403 (D-Link) Fixed in 1.10.01
Fix · CNA G415 (D-Link) Fixed in 1.10.01
Fix · CNA G416 (D-Link) Fixed in 1.10.01
Fix · CNA M18 (D-Link) Fixed in 1.10.01
Fix · CNA R03 (D-Link) Fixed in 1.10.01
Fix · CNA R04 (D-Link) Fixed in 1.10.01
Fix · CNA R12 (D-Link) Fixed in 1.10.01
Fix · CNA R18 (D-Link) Fixed in 1.10.01
Fix · CNA E30 (D-Link) Fixed in 1.10.02
Fix · CNA M30 (D-Link) Fixed in 1.10.02
Fix · CNA M32 (D-Link) Fixed in 1.10.02
Fix · CNA M60 (D-Link) Fixed in 1.10.02
Fix · CNA R32 (D-Link) Fixed in 1.10.02
Fix · CNA E15 (D-Link) Fixed in 1.20.01
Fix · CNA R15 (D-Link) Fixed in 1.20.01

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2024-06-17
D-Link E15, E30 and 13 more products — supportannouncement.us.dlink.com/security/publication.aspx?…
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2024-05601 D-Link router - Arbitrary File ReadingPriority LOW 29
Show all 2 records → Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2024-6045
2026-10-03 Alias added: GHSA-m8cg-23fc-95h8

References

Advisory 3

TI-2024-03070 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection KEVCVSS 3.1CRITICAL 9.8
TI-2024-03069 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials KEVCVSS 3.1CRITICAL 9.8
TI-2024-00708 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal KEVCVSS 3.1CRITICAL 9.8
TI-2023-10693 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to… KEVCVSS 3.1CRITICAL 9.8
TI-2022-17249 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
TI-2022-09657 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE)… KEVCVSS 3.1CRITICAL 9.8

See all 979 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences