D-Link DSL6740C Firmware vulnerabilities

7 CVEs affecting D-Link DSL6740C Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-11068, published 2024-11-11.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-11066, published 2024-11-11. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through the specific web…
• CVE-2024-11065, published 2024-11-11. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific…
• CVE-2024-11064, published 2024-11-11. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific…
• CVE-2024-11063, published 2024-11-11. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific…
• CVE-2024-11062, published 2024-11-11. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific…
• CVE-2024-11067, published 2024-11-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's…
• CVE-2024-11068, published 2024-11-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The D-Link DSL6740C modem has an Incorrect Use of Privileged APIs vulnerability, allowing unauthenticated remote attackers to modify any user’s password by leveraging the API, thereby granting access…