CVE-2024-45694: D-Link Dir-x4860 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device.

Affected products

• D-Link Dir-x4860 Firmware: version 1.00 only; version 1.04 only
• D-Link Dir-x5460 Firmware: version 1.01 only; version 1.02 only; version 1.04 only; version 1.10 only

Published 2024-09-16. Last modified 2026-06-17.