CVE-2024-11062

The D-Link DSL6740C modem has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specific functionality provided by SSH and Telnet.

More information : https://www.twcert.org.tw/en/cp-139-8228-1fbb0-2.html

Attack vector : NETWORK
Attack complexity : LOW
Privileges required : HIGH
User interaction : NONE
Confidentiality impact : HIGH
Integrity impact : HIGH
Base score : 7.2
Base severity : HIGH
Exploitability score : 1.2
Impact score : 5.9