6.5

CVE-2024-33345

Exploit
D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a crafted input.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Dir-823g Firmware Version 1.0.2b05
   Dlink ≫ Dir-823g Version a1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.79% 0.513
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G
Product
https://github.com/n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware
Third Party Advisory
Exploit