D-Link M60 vulnerabilities

CVE-2024-6045 [HIGH] CWE-798 CVE-2024-6045: Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthent Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.

CVE-2026-7554 [HIGH] CWE-640 CVE-2026-7554: A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown f A vulnerability was determined in D-Link M60 up to 1.20B02. Affected by this issue is some unknown functionality of the file /usr/bin/httpd. This manipulation causes weak password recovery. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been publicly

CVE-2024-6044 [MEDIUM] CWE-22 CVE-2024-6044: Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attac Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.