Security Advisory

CVE-2024-57595

9.8
CRITICAL

Vulnerability Description

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wps_pin" passed to the apc_client_pin.cgi binary through a POST request.
Published Date January 27, 2025
Official Source NIST NVD Advisory