CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function via the flag parameter and cmd parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2024-11-21

Last modified

2024-11-22

Weaknesses

CWE-77, CWE-78

Affected products

• Di-8200 Firmware (Dlink)

References

• https://github.com/faqiadegege/IoTVuln/blob/main/DI_8200_msp_info_htm_rce/detail.md