Beveiligingsadvies

CVE-2024-48632

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-17 00:00:00
Laatst bijgewerkt 2024-10-17 19:04:18
Toegewezen door mitre
CVSS-score 8.0
Status PUBLISHED

Beschrijving

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.