Vulnerability Details CVE-2024-23625
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.073
EPSS Ranking 94.4%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 8.3
References
Products affected by CVE-2024-23625
-
cpe:2.3:h:dlink:dap-1650:-
-
cpe:2.3:o:dlink:dap-1650_firmware:-