GCVE - cpe:2.3:a:d-link:dir-x4860_a1:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:d-link:dir-x4860_a1:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	D Link (`f324da99-07b9-589f-a800-1ce04a08f309`)
Product	Dir X4860 A1 (`8d5760a7-2132-5d43-922f-64a516cb1e8f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-45698`	vulnerable	2026-06-08 06:48:08.934535	D-Link WiFi router - OS Command Injection CRITICAL (9.8) Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device. Published: 2024-09-16T06:52:52.517Z Updated: 2025-09-15T19:24:37.872Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8090-bf06b-1.html https://www.twcert.org.tw/en/cp-139-8091-bcd52-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45697`	vulnerable	2026-06-08 06:48:08.933811	D-Link WiFi router - Hidden Functionality CRITICAL (9.8) Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS commands using hard-coded credentials. Published: 2024-09-16T06:48:58.070Z Updated: 2024-09-16T13:14:25.644Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8088-590ed-1.html https://www.twcert.org.tw/en/cp-139-8089-32df6-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45696`	vulnerable	2026-06-08 06:48:08.928852	D-Link WiFi router - Hidden Functionality HIGH (8.8) Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method can only be accessed from within the same local network as the device. Published: 2024-09-16T06:45:52.996Z Updated: 2024-09-16T13:44:11.444Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8086-93ed5-1.html https://www.twcert.org.tw/en/cp-139-8087-c3e70-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45695`	vulnerable	2026-06-08 06:48:08.927043	D-Link WiFi router - Stack-based Buffer Overflow CRITICAL (9.8) The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. Published: 2024-09-16T06:37:59.375Z Updated: 2024-09-16T13:45:32.142Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8082-f1687-1.html https://www.twcert.org.tw/en/cp-139-8083-a299e-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45694`	vulnerable	2026-06-08 06:48:08.920842	D-Link WiFi router - Stack-based Buffer Overflow CRITICAL (9.8) The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, which allows unauthenticated remote attackers to exploit this vulnerability to execute arbitrary code on the device. Published: 2024-09-16T06:33:25.812Z Updated: 2024-09-16T13:48:12.763Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-8080-7f494-1.html https://www.twcert.org.tw/en/cp-139-8081-3fb39-2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.