4 matches found
CVE-2024-33344
D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...
9.8CVSS8.6AI score0.19893EPSS
SaveExploits1References1
CVE-2024-33344
D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...
9.8CVSS8.2AI score0.19893EPSS
SaveExploits1References2
CVE-2024-33344
The D-Link DIR-822+ wireless router, specifically version V1.0.5 , contains a command injection vulnerability in the ftext() function of the upload_firmware.cgi script. The root cause is the failure to neutralize special elements used in the operating system's command when processing the UPLOAD_F...
9.8CVSS8.5AI score0.19893EPSS
SaveExploits1References2Affected Software1
20