CVE-2024-13030

Katalog CVE

CVSS 9.8 · Critical EPSS 2,0%

Kerentanan Incorrect Privilege Assignment pada dlink dir-823g firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Rincian

Terbit di NVD

30 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 79,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.289763 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.467903 advisory pihak ketiga · vdb entry
• https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-823G/SetAutoRebo... broken link
• https://vuldb.com/?ctiid.289763 permissions required · vdb entry
• https://www.dlink.com.cn/about/article/news?id=2247 product
• https://www.dlink.com/ product