SSL Certificate Validation Vulnerability Affects D-Link DIR-1950 Firmware Update
CVE-2024-36755
Currently unrated 🤨
Summary
D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack.
Timeline
Vulnerability published.
Collectors
NVD Database