CVE-2023-24330

CWE-77 — Command Injection3 documents3 sources

Severity

8.8HIGH

EPSS

1.0%

top 23.62%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dlink Dir-882 Firmware

Timeline

PublishedFeb 21

Description

Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDdlink/dir-882_firmware1.30b06

🔴Vulnerability Details

GHSA

GHSA-ww9q-rq9r-q86p: Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST↗2024-02-21

▶

CVEList

CVE-2023-24330: Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST↗2024-02-21

▶