CVE-2024-51024

Summary

CVE-2024-51024 is a newly discovered vulnerability affecting the D-Link DIR_823G 1.0.2B05 firmware. This issue allows attackers to execute arbitrary operating system commands through a crafted request to the SetWanSettings function, specifically by exploiting the HostName parameter. By sending malicious input to this parameter, an attacker can inject and execute OS commands, posing a significant security risk. The vulnerability could lead to unauthorized access, data theft, or even system takeover. Users are strongly advised to update their D-Link DIR_823G firmware as soon as a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.