Vulnerability Details CVE-2024-23624
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.1
EPSS Ranking 92.7%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 8.3
References
Products affected by CVE-2024-23624
-
cpe:2.3:h:dlink:dap-1650:-
-
cpe:2.3:o:dlink:dap-1650_firmware:-