CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-05-06

Last modified

2025-01-07

Weaknesses

CWE-77, CWE-78

Affected products

• Dir-845l (D-link)
• Dir-845l Firmware (Dlink)

References

• https://github.com/yj94/Yj_learning/blob/b597925953d8bbb286a63f0019bb547c1617cb61/Week16/D-LINK-POC.md
• https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md