Security Advisory

CVE-2024-23625

9.6
CRITICAL

Vulnerability Description

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Published Date January 26, 2024
Official Source NIST NVD Advisory