CVE-2024-44400

critical · 9.8

A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp function in the upgrade_filter.asp file. Manipulation of the path parameter can lead to command injection.

9.8

CVSS

14.5%

EPSS (exploit prob.)

96th

EPSS percentile

2024-09-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77

Affected products

Vendor	Product	Affected versions
dlink	di-8400_firmware	16.07.26a1
dlink	di-8400	a1

Check a specific version with /api/v1/cve/match.

References

https://github.com/lonelylonglong/openfile-/blob/main/D-link_DI_8400-16.07.26A1_Command_Injection.md/CVE-2024-44400
https://github.com/lonelylonglong/openfile-/blob/main/D-link_DI_8400-16.07.26A1_Command_Injection.md/D-link_DI_8400-16.07.26A1_Command_Injection.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-44400