CVE-2024-13030: D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control
A vulnerability was found in D-Link DIR-823G 1.0.2B0520181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13030?
CVE-2024-13030 has been rated as critical.
What devices are affected by CVE-2024-13030?
CVE-2024-13030 affects the D-Link DIR-823G device.
How do I fix CVE-2024-13030?
To fix CVE-2024-13030, update your D-Link DIR-823G firmware to the latest version.
What functions are vulnerable in CVE-2024-13030?
CVE-2024-13030 impacts the SetAutoRebootSettings, SetClientInfo, SetDMZSettings, SetFirewallSettings, SetParentsControlInfo, SetQoSSettings, and SetVirtualServerSettings functions.
Is CVE-2024-13030 remotely exploitable?
Yes, CVE-2024-13030 can potentially be exploited remotely due to its nature.