CVSS 3.1 Score 6.3 of 10 (medium)


Published May 16, 2024
Updated: May 17, 2024
CWE ID 434


CVE-2024-4961 is a critical vulnerability found in D-Link DAR-7000-40 V31R02B1413C. The vulnerability affects an unknown functionality of the file /user/onlineuser.php and allows for unrestricted file upload. It can be exploited remotely, posing a potential danger to organizations using this product. The vulnerability has been disclosed to the public, and although the vendor confirmed that the product is end-of-life and should be retired and replaced, it is important for affected organizations to take immediate action to remediate the vulnerability and prevent any potential security breaches.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-4961 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options