CVE-2024-48634

High · 8.0

CVSS

8.0

EPSS

17.6%

Published

Oct 17, 2024

CISA due date

—

The record

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

Affected packages

Ecosystem	Package	Introduced	Fixed