CVE-2023-24331: Command Injection
Published Feb 21, 2024
·Updated
Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter.
Affected Software
3 affected components
D-Link Dir 816
All of the following
Dlink Dir-816 Firmware=1.10nb04
Dlink DIR-816=a2
Event History
Feb 21, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-24331?
CVE-2023-24331 is rated as a high severity vulnerability due to the potential for arbitrary command execution by attackers.
2
How do I fix CVE-2023-24331?
To mitigate CVE-2023-24331, update the D-Link Dir 816 firmware to the latest version provided by the vendor.
3
What devices are affected by CVE-2023-24331?
CVE-2023-24331 affects D-Link Dir 816 devices running firmware version DIR-816_A2_v1.10CNB04.
4
What type of vulnerability is CVE-2023-24331?
CVE-2023-24331 is classified as a command injection vulnerability.
5
Can CVE-2023-24331 be exploited remotely?
Yes, CVE-2023-24331 can be exploited remotely, allowing attackers to execute arbitrary commands over the network.