Skip to content
OpenAdvisories
High · 7.5 CVE-2024-36832 EUVD-2024-36102GHSA-4fj3-xj7w-f7cv

A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web requ…

Published Dec 17, 2024 · Updated Dec 17, 2024 · Assigned by mitre

Description

A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it will crash and exit due to a null pointer reference, leading to a denial of service attack to the device.

References