CVE-2024-24321

Опубликовано: 08 фев. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.

Ссылки

http://dir-816a2.com
Broken Link
https://github.com/dkjiayu/Vul/blob/main/DIR816A2-dir_setWanWifi.md
Exploit
Third Party Advisory
https://www.dlink.com/
Product
https://www.dlink.com/en/security-bulletin/
Product
http://dir-816a2.com
Broken Link
https://github.com/dkjiayu/Vul/blob/main/DIR816A2-dir_setWanWifi.md
Exploit
Third Party Advisory
https://www.dlink.com/
Product
https://www.dlink.com/en/security-bulletin/
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05:*:*:*:*:*:*:*

cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02155

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

GHSA-34vw-rxxh-698f