Vulnerability Details CVE-2024-23625
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.1
EPSS Ranking 92.7%
CVSS Severity
CVSS v3 Score 9.6
CVSS v2 Score 8.3
References
Products affected by CVE-2024-23625
-
cpe:2.3:h:dlink:dap-1650:-
-
cpe:2.3:o:dlink:dap-1650_firmware:-