What’s Vulnerable › Vulnerabilities

CVE-2024-25331

• Severity: critical (CVSS 9.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-12 · updated 2026-06-17
• Weakness: CWE-121

Description

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.

Affected products

• D-Link DIR-822: 2.02krb09, 2.03wwb01

References

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372
• https://www.ensigninfosecurity.com/advisories/vulnerability-advisories/2
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10372
• https://www.ensigninfosecurity.com/advisories/vulnerability-advisories/2

Get alerted when CVE-2024-25331 or the next vulnerability affects your stack