References https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html https://www.sentinelone.com/vulnerability-database/cve-2024-6045/ https://gbhackers.com/hidden-backdoor-in-d-link-routers/ https://www.eevblog.com/forum/networking/16-d-link-routers-with-backdoor-(cve-2024-6045)/ https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398 https://en.wikipedia.org/wiki/D-Link https://www.bbc.com/news/technology-24519307 https://www.bleepingcomputer.com/news/security/backdoor-account-found-in-d-link-dir-620-routers/ https://www.welivesecurity.com/2013/10/23/rotten-routers-more-brands-found-to-contain-hidden-backdoors/ https://firsthackersnews.com/backdoor-in-d-link-routers/
Related VulnerabilitiesPoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication BypassPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass畅捷CRM /lead/leadhiddenvalue.php/getlist SQL 注入漏洞PoCCVE-2026-49777: WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCEPoCwp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page ExposureCVE-2011-2523: VSFTPD 2.3.4 - Backdoor Command ExecutionPoCCVE-2021-40859: Auerswald COMpact 5500R 7.8A and 8.0B Devices BackdoorPoCCVE-2023-5089: Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)PoCCVE-2024-29972: Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor AccountPoCCVE-2024-3272: D-Link Network Attached Storage - Backdoor AccountPoCCVE-2024-3273: D-Link Network Attached Storage - Command Injection and Backdoor AccountPoCCVE-2024-6289: WPS Hide Login < 1.9.16.4 - Hidden Login Page DisclosurePoCCVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure