Known Vulnerabilities
CVE-2024-51151
D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function via the flag parameter and cmd parameter.
HIGH
CVSS 8.0
Published Nov 20, 2024
CVE-2024-44415
A vulnerability was discovered in DI_8200-16.07.26A1, There is a buffer overflow in the dbsrv_asp function; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
MEDIUM
CVSS 6.5
Published Oct 11, 2024
CVE-2024-44413
A vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.
HIGH
CVSS 8.8
Published Oct 11, 2024