CVE-2024-44402: Command Injection
Published Sep 6, 2024
·Updated
D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm.
Affected Software
2 affected components
All of the following
Dlink Di-8100g Firmware=17.12.20a1
Dlink Di-8100g
Event History
Sep 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-44402?
CVE-2024-44402 is classified as a high severity vulnerability due to its potential for command injection.
2
How do I fix CVE-2024-44402?
To fix CVE-2024-44402, upgrade to the latest firmware version that addresses the command injection vulnerability.
3
What devices are affected by CVE-2024-44402?
The D-Link DI-8100G with firmware version 17.12.20A1 is specifically affected by CVE-2024-44402.
4
What type of vulnerability is CVE-2024-44402?
CVE-2024-44402 is a command injection vulnerability that allows unauthorized command execution.
5
Can CVE-2024-44402 be exploited remotely?
Yes, CVE-2024-44402 can be exploited remotely if an attacker has access to the vulnerable device's web interface.