CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2024-07699.8/CRITICALEPSS 82.7%CISA KEV
2024-01-21

D-Link DIR-859 Router hedwig.cgi Path Traversal and Remote Code Execution Vulnerability (CVE-2024-0769)

[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.

[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse