CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

CVE-2024-39962

The D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router (version v21_D240126 ) is vulnerable to Remote Code Execution (RCE) due to insufficient input validation in the HTTP Request Handler component. Specifically, the ntp_zone_val parameter at the /goform/set_ntp API endpoint fails to proper...