CVE-2024-7436 — Command Injection in D-link Di-8100

CWE-77 — Command Injection3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
1.8%
top 17.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Di-8100Dlink Di-8100 Firmware
Timeline
PublishedAug 3

Description

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273521 was assigned to this vulnerability.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/di-810016.07

🔴Vulnerability Details

2
GHSA
GHSA-5gjw-xf38-367f: A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16↗2024-08-03
▶
CVEList
D-Link DI-8100 msp_info.htm msp_info_htm command injection↗2024-08-03
▶
CVE-2024-7436 — Command Injection in D-link Di-8100 | cvebase