CVE-2024-41611

9.8 criticalEPSS 0.8%

Critical (9.8) in dlink dir-860l firmware. EPSS 0.8% chance of exploitation in the next 30 days.

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2024-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-860l_firmware

References

https://github.com/Nop3z/CVE/blob/main/dlink/dir-820/Dlink-860L-hardcoded-vulnerability.md
https://www.dlink.com/en/security-bulletin/
https://github.com/Nop3z/CVE/blob/main/dlink/dir-820/Dlink-860L-hardcoded-vulnerability.md
https://www.dlink.com/en/security-bulletin/

Check your stack JSON