CVE-2024-48632: Command Injection
D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48632?
CVE-2024-48632 is classified as a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2024-48632?
To fix CVE-2024-48632, update the firmware of the D-Link DIR-882 and DIR-878 devices to the latest version provided by D-Link.
What devices are affected by CVE-2024-48632?
CVE-2024-48632 affects the D-Link DIR-882 Firmware versions and the D-Link DIR-878 Firmware.
What type of vulnerability is CVE-2024-48632?
CVE-2024-48632 is a command injection vulnerability that allows attackers to execute arbitrary OS commands.
Can CVE-2024-48632 be exploited remotely?
Yes, CVE-2024-48632 can be exploited remotely if an attacker has access to the affected parameters on the device.