Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2024-23624

D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
XI

Description

A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

D-Link DAP-1650

Default version status: unaffected

  • 0 to ≤ 1.04B01affected

References