CVE-2024-24321: Command Injection
Published Feb 8, 2024
·Updated
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function.
Affected Software
2 affected components
All of the following
Dlink Dir-816 Firmware=1.10cnb05
Dlink DIR-816=a2
Event History
Feb 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24321?
CVE-2024-24321 is rated as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-24321?
To mitigate CVE-2024-24321, update the D-Link DIR-816A2 firmware to the latest version provided by D-Link.
3
Who is affected by CVE-2024-24321?
CVE-2024-24321 affects users of D-Link DIR-816A2 firmware version 1.10CNB05.
4
What potential impact does CVE-2024-24321 have?
Exploitation of CVE-2024-24321 could allow an attacker to execute arbitrary code on affected devices.
5
Is CVE-2024-24321 patched?
As of now, a patch for CVE-2024-24321 is expected to be released by D-Link, recommended users to stay informed about firmware updates.