Skip to content
OpenAdvisories

Product · D-Link

DAP-1650

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-23625

    D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability

    A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

    D-Link DAP-1650 Network devices
  • Critical 9.6
    CVE-2024-23624

    D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability

    A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

    D-Link DAP-1650 Network devices