CVE-2024-48271

Description

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack.

Affected Systems

Vendor	dlink
Product	dsl-6740c_firmware
Affected Versions	6.tr069.20211230; -
CWE ID	CWE-521

Mitigation

Apply the latest security patches from the vendor, restrict network exposure where applicable, and monitor for exploitation attempts.

Fix Instructions

References

• https://gist.github.com/stevenyu113228/e264c145d6e6e6b59cf53...
• https://www.dlink.com/en/security-bulletin/...