Critical severity9.8NVD Advisory· Published Feb 18, 2025· Updated Jun 17, 2026

CVE-2024-57045

Description

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir 859 A3 Firmware
cpe:2.3:o:dlink:dir-859_a3_firmware:*:*:*:*:*:*:*:*
Range: <1.05
Dlink/DIR-882 Routercpe-rescue
Dlink/DIR-859llm-create
Range: <=A3 1.05

Patches

Vulnerability mechanics

References

github.com/Shuanunio/CVE_Requests/blob/main/D-Link/DIR-859/ACL%20bypass%20Vulnerability%20in%20D-Link%20DIR-859.mdnvdExploitThird Party Advisory
www.dlink.com/en/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.026
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000