D-Link DSL 2888a - Authentication Bypass/Remote Command Execution

D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55 are vulnerable to authentication bypass issues which can lead to remote command execution. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality. id: CVE-2020-24579 info: name: D-Li...

CVE-2020-24579

creationtimestamp| type| source ---|---|--- 2020-12-22 22:53:15+00:00| seen| https://t.me/cibsecurity/21181 2024-10-09 19:16:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2670...

CVE-2020-24579

D-Link DSL-2888A devices with firmware before AU_2.31_V1.1.47ae55 are vulnerable to an authentication bypass, enabling an unauthenticated attacker to access authenticated pages and functionality. Nuclei templates describe remote command execution as a potential outcome. Remediation: update to AU_...