Security Advisory

CVE-2024-48635

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-17 00:00:00
Last updated 2024-10-17 19:03:55
Assigner mitre
State PUBLISHED

Description

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.