Command Injection Vulnerability in D-Link DIR_882 and DIR_878 Products
CVE-2024-48631

Currently unrated

Key Information:

Vendor

D-Link
Status
DIR_882 and DIR_878
Vendor
CVE Published:
17 October 2024

What is CVE-2024-48631?

D-Link DIR_882 and DIR_878 routers contain a command injection vulnerability through the SSID parameter in the SetWLanRadioSettings function. This security flaw enables attackers to execute arbitrary operating system commands by sending specially crafted POST requests, potentially compromising the integrity and security of the affected devices.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/pjqwudi1/my_vuln/blob/main/D-link4/vul...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.