CVE Catalog
CVE-2024-24321
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk1.96%
78th percentile - higher than 78% of all known CVEs
Summary
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.
Risk Assessment
An attacker can remotely take control of the router, leading to network confidentiality and integrity breaches and potential use of the device for further attacks.
Recommendation
Immediately update the Dlink DIR-816A2 firmware to the latest available version or apply a workaround by disabling remote access to the administrative panel.
Original NVD description (English source)
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.