GCVE - cpe:2.3:o:dlink:dir-x4860_firmware:1.04:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-x4860_firmware:1.04:*:*:*:*:*:*:*

part: o version: 1.04 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir X4860 Firmware (`e5766549-890d-5bf0-975c-9f43f4816ac8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-45698`	vulnerable	2026-06-08 06:48:08.934576	D-Link WiFi router - OS Command Injection CRITICAL (9.8) Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device. Published: 2024-09-16T06:52:52.517Z Updated: 2025-09-15T19:24:37.872Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8090-bf06b-1.html https://www.twcert.org.tw/en/cp-139-8091-bcd52-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45697`	vulnerable	2026-06-08 06:48:08.933984	D-Link WiFi router - Hidden Functionality CRITICAL (9.8) Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials. Published: 2024-09-16T06:48:58.070Z Updated: 2024-09-16T13:14:25.644Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8088-590ed-1.html https://www.twcert.org.tw/en/cp-139-8089-32df6-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45696`	vulnerable	2026-06-08 06:48:08.931175	D-Link WiFi router - Hidden Functionality HIGH (8.8) Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device. Published: 2024-09-16T06:45:52.996Z Updated: 2024-09-16T13:44:11.444Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8086-93ed5-1.html https://www.twcert.org.tw/en/cp-139-8087-c3e70-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45695`	vulnerable	2026-06-08 06:48:08.927094	D-Link WiFi router - Stack-based Buffer Overflow CRITICAL (9.8) The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. Published: 2024-09-16T06:37:59.375Z Updated: 2024-09-16T13:45:32.142Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8082-f1687-1.html https://www.twcert.org.tw/en/cp-139-8083-a299e-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45694`	vulnerable	2026-06-08 06:48:08.925896	D-Link WiFi router - Stack-based Buffer Overflow CRITICAL (9.8) The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. Published: 2024-09-16T06:33:25.812Z Updated: 2024-09-16T13:48:12.763Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8080-7f494-1.html https://www.twcert.org.tw/en/cp-139-8081-3fb39-2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.