D-Link r18 vulnerabilities

2 CVEs affecting D-Link r18, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6045, published 2024-06-17.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-6045, published 2024-06-17. High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days. Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by…
• CVE-2024-6044, published 2024-06-17. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.