← CVE Intelligence

CVE-2024-23625

D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability PUBLISHED

Description (CNA)

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

Affected (CNA)

Vendor / productVersions
D-Link / DAP-1650affected 0 through 1.04B01

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.