CVE-2024-11065

CVE-2024-11065 is an OS Command Injection vulnerability affecting D-Link DSL6740C modems, allowing remote attackers with administrator privileges to execute arbitrary system commands via SSH and Telnet. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and low attack complexity once administrative access is obtained. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, notably regarding D-Link's decision not to patch end-of-life devices. Its EPSS score is low, suggesting a low probability of exploitation in the wild.