D-Link Routers Critical Backdoor Vulnerability Exposed

Taiwan’s CERT has warned about a serious security issue with D-Link wireless routers, affecting many models. This vulnerability could let attackers on the local network access the router’s Telnet service using basic administrator credentials

CVE-2024-6045

• Alert
• Cyber Attack

ALERT
Hackers Using Supershell Malware Targeting Linux SSH Servers

By infosecbulletin / Friday , September 20 2024

Researchers found an attack targeting poorly secured Linux SSH servers using Supershell, a backdoor written in Go that gives attackers...

Read More

• Vulnerabilities

GitLab Patches Critical Authentication Bypass flaw

By infosecbulletin / Thursday , September 19 2024

GitLab released patches for a critical flaw in Community and Enterprise Editions that could allow authentication bypass. The vulnerability in...

Read More

• Cyber Attack
• National

Ransomware hit Bangladeshi Globe Pharmaceuticals Ltd

By infosecbulletin / Thursday , September 19 2024

On September 16, 2024, Globe Pharmaceuticals Ltd., a major pharmaceutical company in Bangladesh, was hit by a ransomware attack detected...

Read More

• Cyber Attack

Joint cybersecurity advisory
Botnet infects 260,000 SOHO routers, IP cameras with malware

By infosecbulletin / Wednesday , September 18 2024

The FBI has alerted that cyber actors have compromised over 260,000 internet-connected devices, mainly routers, to form a large botnet...

Read More

• Alert
• Vulnerabilities

Chrome 129 Released Fix with multiple Security Flaws

By infosecbulletin / Wednesday , September 18 2024

Google has released Chrome 129 for Windows, Mac, and Linux users. The update will be available gradually over the next...

Read More

• Cyber Attack
• Vulnerabilities

Broadcom fixed RCE bug in VMware vCenter Server

By infosecbulletin / Wednesday , September 18 2024

Broadcom has fixed a serious VMware vCenter Server vulnerability that allows attackers to execute remote code on unpatched servers through...

Read More

• Cyber Attack
• Vulnerabilities

Cybercriminal now misuse Microsoft Azure tool to steal data

By infosecbulletin / Wednesday , September 18 2024

Ransomware groups like BianLian and Rhysida use Microsoft's Azure Storage Explorer and AzCopy to steal data from hacked networks and...

Read More

• Vulnerabilities

Apple warns users to install iOS 18 to Fix 33 iPhone Vulnerabilities

By infosecbulletin / Tuesday , September 17 2024

Apple has released iOS 18, the latest update for iPhones and iPads. Along with new features, it mainly focuses on...

Read More

• Alert

CISA adds windows and whatsUp Gold vuls to its KEV

By infosecbulletin / Tuesday , September 17 2024

CISA has warned Microsoft Windows MSHTML Platform Spoofing Vulnerability and Progress WhatsUp Gold SQL Injection Vulnerability actively exploited security flaws,...

Read More

• Data Breach

Petroleum and Fuel Industry
FleetPanda exposes Nearly One Million Documents

By infosecbulletin / Tuesday , September 17 2024

Cybersecurity researcher Jeremiah Fowler found a non-password-protected database with 780,000 records from FleetPanda, a tech provider for dispatch management. The...

Read More

Certain D-Link router models have a hidden backdoor that was recently discovered. This flaw allows attackers on the same network to gain unauthorized control over the router by accessing a specific URL, enabling the Telnet service, and using administrator credentials obtained from firmware analysis. This poses significant security risks.

The affected D-Link router models are: E15, E30, G403, G415, G416, M15, M18, M30, M32, M60, R03, R04, R12, R15, R18, and R32.

D-Link released firmware updates to fix the CVE-2024-6045 (CVSS 8.8) vulnerability. Users should update their router’s firmware to the specified versions or later.

G403, G415, G416, M18, R03, R04, R12, R18: Update to firmware version 1.10.01 or later.
E30, M30, M32, M60, R32: Update to firmware version 1.10.02 or later.
E15, R15: Update to firmware version 1.20.01 or later.

Ensure the successful update by comparing the router’s displayed firmware version with the downloaded update.

D-Link is working on releasing official firmware updates, but for now, there may be beta versions available. However, users should be careful when using beta software, as it is still being tested and might not be completely stable. D-Link is not responsible for any problems that might occur from using beta firmware.

You can visit D-Link’s website for more info and to download the latest firmware updates.