← Database

CVE-2024-48638

HIGH CVSS: 8.0 Published: 2024-10-17 Modified: 2026-06-17

Description

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

Affected Platforms

Dlink Dir-882Dlink Dir-878Dlink Dir-882 FirmwareDlink Dir-878 Firmware

Weakness Type

CWE-78

References