← Back to browse
·
API
CVE-2024-44410
Severity
CRITICAL
CVSS
9.8
EPSS
0.03227
Risk score
40.33
CISA KEV
No
PoC
No
Published
2024-09-09
Modified
2024-09-10
First seen
2026-08-07
Aliases
EUVD-2024-41028, GHSA-C6F5-VG46-H8R2
Products
n/a:n/a n/a
Sources
euvd
EUVD-2024-41028
Description
D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-41028
https://www.dlink.com/en/security-bulletin/
https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DI-8300A1/DI-8300A1.md
https://github.com/LYaoBoL/IOTsec/blob/main/D-Link/DI-8300A1/CVE-2024-44410