CVE-2024-44334: Command Injection
D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution due to insufficient parameter filtering in the CGI handling function of upgradefilter.asp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44334?
CVE-2024-44334 is considered critical due to its potential to allow remote command execution.
How do I fix CVE-2024-44334?
To fix CVE-2024-44334, update the firmware of affected D-Link devices to the latest version provided by the vendor.
Which devices are affected by CVE-2024-44334?
CVE-2024-44334 affects D-Link DI-7003GV2, DI-7100G+V2, DI-7100GV2, DI-7200GV2, DI-7300G+V2, and DI-7400G+V2.
What type of vulnerability is CVE-2024-44334?
CVE-2024-44334 is a remote command execution vulnerability caused by insufficient parameter filtering.
Can CVE-2024-44334 be exploited remotely?
Yes, CVE-2024-44334 can be exploited remotely by attackers to execute arbitrary commands on vulnerable devices.