CVE-2024-23624
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-23624 is a command injection vulnerability affecting the gena.cgi module in D-Link DAP-1650 devices. An attacker, without requiring authentication, can exploit this flaw to inject and execute arbitrary commands with root privileges on the device. This vulnerability poses a significant risk to the security of D-Link DAP-1650 devices and requires immediate attention from users and network administrators. Successful exploitation could lead to unauthorized access, data theft, or even device takeover. It is recommended that users update their devices with the latest firmware to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions