CVE-2024-44413

HIGH EPSS 85.8%
Published Oct 11, 20241y ago · Modified Jun 17, 20261w ago
8.8 CVSS 3.1
High
Find Similar
Published Oct 11, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.

CVSS Details

Base Score
8.8
Exploitability
2.8
Impact
5.9
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
85.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-77 Command Injection Injection

References 2

  • github.com https://github.com/IotChan/cve/blob/main/dlink/di-8300/CVE-2024-44413
  • github.com https://github.com/IotChan/cve/blob/main/dlink/di-8300/di-8200.md

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.