CVE-2024-41616

The router firmware contains hardcoded login credentials for the Telnet service that the user cannot change or remove. An attacker with network access to the device can exploit these known credentials to log in without any prior authorization. Since the attack requires no privileges, user interaction, or special conditions, the vulnerability is exceptionally easy to exploit.

An attacker can gain full, unauthorized access to the device with administrative privileges, enabling modification of network configuration, eavesdropping on network traffic, and leveraging the device as an entry point for further attacks on internal infrastructure.

Apply patches available from the manufacturer according to the references. As an immediate remedial action, it is recommended to block access to the Telnet service at the firewall level and restrict access to the device management interface exclusively to trusted IP addresses. If the manufacturer does not provide updates, consider replacing the device with a supported alternative.

D-Link DIR-300 REVA with firmware version v1.06B05_WW