BleepingComputer reports that all D-Link DIR-859 routers, which have reached end-of-life, are at risk of being compromised for information disclosure, privilege escalation, and device takeovers, amid ongoing intrusions leveraging the critical path traversal vulnerability, tracked as CVE-2024-0769. Attacks against the vulnerable D-Link routers involve a public proof-of-concept exploit aimed at the “DHCPS6.BRIDGE-1.xml”

Source: SC Magazine