CVE-2024-33345

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.78% chance of exploitation in the next 30 days, 55th percentile

Published

2024-04-29

Updated

2024-08-02

Proof-of-concept exploits (1)

• n0wstr/IOTVuln/tree/main/DIR-823g/UploadFirmware1★ · 2025-04-22

Security advisories

• http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-823G

References

• CVE Record
• NVD entry

Related

• CVE-2024-34200
• CVE-2024-34201
• CVE-2024-34202
• CVE-2024-34203
• CVE-2024-34204
• CVE-2024-34206