Learn about the severe security flaws in the D-Link DIR-846W router and how they can leave users vulnerable to remote attacks.
D-Link
Kolte, who reported the CVE-2024-39202 flaw to D-Link, also published detailed technical information and a proof-of-concept (PoC) exploit code
CVE-2024-5296 (CVSS 9.6) - This critical vulnerability allows remote attackers to bypass authentication on affected installations
Goldoon botnet is ruthlessly exploiting a CVE-2015-2051 vulnerability in D-Link devices to commandeer them for malicious activities
CVE-2024-25331 leaves the door wide open for unauthenticated attackers to take full control of affected routers
A critical buffer overflow & remote code execution (CVE-2022-41140) vulnerability affected several D-Link routers that were unpatched.
CVE-2022-3210 vulnerability affects the D-Link DIR-2150 hardware revision R with firmware version v4.01 & below