CVE-2024-0769

🗓️ 21 Jan 2024 08:00:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 111 Views🌐 WEB

A critical path traversal vulnerability in D-Link DIR-859 1.06B0

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2024-0769	21 Jan 202400:00	–	attackerkb
BDU FSTEC	The vulnerability in the hedwig.cgi script of D-Link DIR-859 router software allows a hacker to gain unauthorized access to protected information.	24 Jan 202400:00	–	bdu_fstec
Circl	CVE-2024-0769	20 Jan 202422:51	–	circl
CISA KEV Catalog	D-Link DIR-859 Router Path Traversal Vulnerability	25 Jun 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	25 Jun 202512:00	–	cisa
CNNVD	D-Link DIR-859 Path Traversal Vulnerability	21 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal	21 Jan 202408:00	–	cvelist
Tenable Nessus	DLink DIR-859 1.05 & 1.06B01 Path Traversal	3 Jul 202500:00	–	nessus
NVD	CVE-2024-0769	21 Jan 202408:15	–	nvd
OpenVAS	D-Link DIR-859 Multiple Vulnerabilities (2019 - 2024)	26 Jun 202500:00	–	openvas

NVD

Node

dlink dir-859_firmwareMatch1.06beta1

AND

dlink dir-859Match-

[
  {
    "vendor": "D-Link",
    "product": "DIR-859",
    "versions": [
      {
        "version": "1.06B01",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
vuldb	www.vuldb.com/
github	www.github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-0769

Parameter	Position	Path	Description	CWE
service	request body	/hedwig.cgi	Path traversal via POST to hedwig.cgi manipulating the service parameter with ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml	CWE-22

17 Jun 2026 06:54Current

9.4High risk

Vulners AI Score9.4

CVSS 3.15.3 - 9.8

CVSS 25

CVSS 35.3

EPSS0.82714

SSVC