D-Link DIR-878 Multiple Vulnerabilities (2024 - 2025)

D-Link DIR-878 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-48638

CVE-2024-48638 affects D-Link DIR-882 (FW130B06) and DIR-878 (FW130B08). The vulnerability is a command injection in SetGuestZoneRouterSettings via the SubnetMask parameter, allowing an attacker to execute arbitrary OS commands through a crafted POST request. The CVSSv3.1 vector is AV:A/AC:L/PR:L...