CVE-2024-28729

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted…

High · published November 12, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

⚡ A local attacker can craft a request to execute arbitrary code on your D-Link DWR 2000M router! How wild is that? Think of it like a sneaky customer who knows the secret code to bypass the security system in a restaurant, letting them access the kitchen and mess with the chef’s recipes. This vulnerability allows unauthorized code execution just like that! An attacker could potentially take full control of the router, manipulating it to intercept traffic or even launch further attacks on your network. Imagine them turning your trusted device into a malicious pawn — that’s a security nightmare no one wants to face!

Put simply

Think of it like a sneaky customer who knows the secret code to bypass the security system in a restaurant, letting them access the kitchen and mess with the chef’s recipes. This vulnerability allows unauthorized code execution just like that! This vulnerability in the D-Link DWR 2000M allows a local attacker to execute arbitrary code by sending a specially crafted request to the device, bypassing standard security protocols. It's a significant flaw that could lead to unauthorized access and control.

What to do

An attacker could potentially take full control of the router, manipulating it to intercept traffic or even launch further attacks on your network. Imagine them turning your trusted device into a malicious pawn — that’s a security nightmare no one wants to face! To protect your network, update your D-Link DWR 2000M firmware to the latest version available. Monitor your network for any unusual activity, and consider implementing additional security measures like changing default passwords and restricting local access. You’ve got this! Follow these steps and you can keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2024-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted…
    cvelistv5