CVE-2024-57045

Critical · 9.8

CVSS

9.8

EPSS

32.2%

Published

Feb 18, 2025

CISA due date

—

The record

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page.

Affected packages

Ecosystem	Package	Introduced	Fixed