High · 8.8 CVE-2023-24330 EUVD-2023-28386GHSA-ww9q-rq9r-q86p

Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via cr…

Published Feb 21, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/.

Advisories 1

WID-SEC-2024-0453 D-LINK Router: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Feb 21, 2024

References

https://github.com/caoyebo/CVE/tree/main/dlink%20882%20-%20CVE-2023-24330