CVE-2024-23624

Summary

CVE-2024-23624 is a command injection vulnerability affecting the gena.cgi module in D-Link DAP-1650 devices. An attacker, without requiring authentication, can exploit this flaw to inject and execute arbitrary commands with root privileges on the device. This vulnerability poses a significant risk to the security of D-Link DAP-1650 devices and requires immediate attention from users and network administrators. Successful exploitation could lead to unauthorized access, data theft, or even device takeover. It is recommended that users update their devices with the latest firmware to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.