Lucene search

K
cveMitreCVE-2024-40505
HistoryJul 16, 2024 - 8:15 p.m.

CVE-2024-40505

2024-07-1620:15:03
CWE-35
mitre
web.nvd.nist.gov
24
directory traversal
d-link dap-1650
firmware v.1.03
local attacker
privilege escalation
hedwig.cgi
cve-2024-40505

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.3%

UNSUPPORTED WHEN ASSIGNED Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.3%

Related for CVE-2024-40505