CVE-2024-25331

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - cve@mitre.org

Published

2024-03-12

Last modified

2024-08-05

Weaknesses

CWE-121

Affected products

• Dir-822 Firmware (Dlink)

References

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372
• https://www.ensigninfosecurity.com/advisories/vulnerability-advisories/2