CVE-2024-57376

Scores

EPSS

0.002very_low0.2%
0%20%40%60%80%100%

Percentile: 0.2%

CVSS

8.8high3.x
0246810

CVSS Score: 8.8/10

All CVSS Scores

CVSS 3.x
8.8

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-120

Related Vulnerabilities

Exploits

Exploit ID: CVE-2024-57376

Source: github-poc

URL: https://github.com/DelspoN/CVE-2024-57376

Vulnerable Software (6)

Type: Configuration

Vendor: dlink

Product: dsr-1000n_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-1000n_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17b901c",          "versionStart...

Source: nvd

Type: Configuration

Vendor: dlink

Product: dsr-150_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-150_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17B901C",          "versionStartIn...

Source: nvd

Type: Configuration

Vendor: dlink

Product: dsr-150n_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-150n_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17B901C",          "versionStartI...

Source: nvd

Type: Configuration

Vendor: dlink

Product: dsr-250_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-250_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17B901C",          "versionStartIn...

Source: nvd

Type: Configuration

Vendor: dlink

Product: dsr-250n_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-250n_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17B901C",          "versionStartI...

Source: nvd

Type: Configuration

Vendor: dlink

Product: dsr-500_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:dlink:dsr-500_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "3.17B901C",          "versionStartIn...

Source: nvd