CVE-2024-36831

MEDIUM EPSS 48.2%
Published Dec 17, 20241y ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Medium
Find Similar
Published Dec 17, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request without authentication.

CVSS Details

Base Score
5.3
Exploitability
3.9
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability Low

Threat Intelligence

EPSS Exploit Probability
48.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 2

VendorProductVersionRange
dlinkdap-1520_firmware1.10b04any
dlinkdap-1520*any

References 4

  • docs.google.com https://docs.google.com/document/d/15CVb7XHIgtfeW1W1pLZJWvlBMYN1rtr75vqZqf1v3Eo/edit?usp=sharing
    Permissions Required
  • supportannouncement.us.dlink.com https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10395
    Vendor Advisory
  • dlink.com https://www.dlink.com/en
    Product
  • dlink.com https://www.dlink.com/en/security-bulletin/
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.