D-Link DSL6740C - Incorrect Use of Privileged APIs

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-8234-0514c-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2024-11068
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10414
• https://www.tenable.com/plugins/nessus/211678
• https://github.com/advisories/GHSA-7932-gcjg-wrfw
• https://cvefeed.io/vuln/detail/CVE-2024-11068
• https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-bug-in-60-000-exposed-eol-modems/
• https://cyberinsider.com/59000-d-link-modems-exposed-with-severe-security-vulnerabilities/
• https://www.sentinelone.com/vulnerability-database/cve-2024-11068/
• https://avd.aquasec.com/nvd/2024/cve-2024-11068/

Related Vulnerabilities

• 九佳易管理系统 PrivilegedCodeDestroy SQL注入漏洞
• 九佳易 Interface/licx/PrivilegedCodeDestroy.asmx/UpdatePrivilegedState SQL 注入漏洞
• 西安九佳易信息资讯有限公司时尚企业管理系统UpdatePrivilegedState code参数存在SQL注入漏洞
• PoCCVE-2024-12356: Privileged Remote Access & Remote Support - Command Injection
• PoCCVE-2019-3401: Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization
• PoCCVE-2019-3403: Jira - Incorrect Authorization
• PoCCVE-2021-26598: ImpressCMS <1.4.3 - Incorrect Authorization
• PoCCVE-2024-45488: SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass
• PoCazure-mfa-not-enabled-privileged-users: Azure MFA Not Enabled for All Privileged Users
• PoCk8s-privileged-containers: Privileged Containers Found in Deployments
• PoCsolar-log-authbypass: Solar-Log 500 2.8.2 - Incorrect Access Control
• 二一零零科技｜公文管理系統 - Incorrect Authorization