EXPOSURES › CVE-2024-24321

CVE-2024-24321

CRITICAL

DETAIL

SourceNVD · cve Published2024-02-08 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-24321 ↗

⚡ RCE SHAME 50/100 rce

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

dlink · vendor dir-816 · product dir-816 firmware · product

DESCRIPTION

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.