CVE-2024-57677

creationtimestamp| type| source ---|---|--- 2025-01-16 18:54:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839550922847694 2025-01-16 18:56:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1998 2025-01-16 19:15:56+00:00| seen|...

CVE-2024-57677

An access control issue in the component form2Wan.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted POST request...

CVE-2024-57677

CVE-2024-57677 describes an access-control flaw in the D-Link 816A2 DIR-816 firmware (form2Wan.cgi) that allows unauthenticated attackers to configure the device’s WAN service via a crafted POST request. Root cause per documents: improper access control on the form2Wan.cgi endpoint, enabling mani...