CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/CLan-nad/CVE/blob/main/D-Link/ip_position_asp/1.md	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dlink:di-8100_firmware:16.07.26a1:*:*:*:*:*:*:*

cpe:2.3:h:dlink:di-8100:-:*:*:*:*:*:*:*

History

04 Jun 2025, 17:02

Type	Values Removed	Values Added
References	~~() https://github.com/CLan-nad/CVE/blob/main/D-Link/ip_position_asp/1.md -~~	() https://github.com/CLan-nad/CVE/blob/main/D-Link/ip_position_asp/1.md - Exploit, Third Party Advisory
First Time		Dlink di-8100 Dlink di-8100 Firmware Dlink
CPE		cpe:2.3:o:dlink:di-8100_firmware:16.07.26a1:::::::* cpe:2.3:h:dlink:di-8100:-:::::::*

22 Nov 2024, 18:15

Type	Values Removed	Values Added
CWE		CWE-120
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.7

19 Nov 2024, 21:57

Type	Values Removed	Values Added
Summary		(es) DI-8100 v16.07.26A1 es vulnerable a un desbordamiento de búfer en la función ip_position_asp a través del parámetro ip.

19 Nov 2024, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-19 14:15

Updated : 2025-06-04 17:02

NVD link : CVE-2024-52711

Mitre link : CVE-2024-52711

CVE.ORG link : CVE-2024-52711

JSON object : View

Products Affected

dlink

di-8100
di-8100_firmware

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

5.7 /10