CVE-2024-44408

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-09-06 · updated 2026-06-17
Weakness: CWE-862

Description

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords.

Affected products

D-Link DIR-823G: 1.0.2b05_20181207

References

https://github.com/lonelylonglong/openfile-/blob/main/DIR-823G.md/CVE-2024-44408
https://github.com/lonelylonglong/openfile-/blob/main/DIR-823G.md/DIR-823G.md

Get alerted when CVE-2024-44408 or the next vulnerability affects your stack