Lucene search
HistoryJul 08, 2024 - 4:15 p.m.
CVE-2024-39202
d-link
dir-823x
firmware
rce
vulnerability
dhcpd_startip
remote command execution
cve-2024-39202
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.1%
D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution (RCE) vulnerability via the dhcpd_startip parameter at /goform/set_lan_settings.
Affected configurations
Node
dlinkdir-823x_ax3000_firmwareMatch240126
dlinkdir-823x_ax3000Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dlink | dir-823x_ax3000_firmware | 240126 | cpe:2.3:o:dlink:dir-823x_ax3000_firmware:240126:*:*:*:*:*:*:* |
| dlink | dir-823x_ax3000 | - | cpe:2.3:h:dlink:dir-823x_ax3000:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-39202
2024-07-08 16:15:08
cvelist
cvelist
CVE-2024-39202
2024-07-08 00:00:00
vulnrichment
vulnrichment
CVE-2024-39202
2024-07-08 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.1%
Related for NVD:CVE-2024-39202