cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2024-44401,https://securityvulnerability.io/vulnerability/CVE-2024-44401,D-Link DI-8100G Vulnerable to Command Injection via Upgrade Filter,"The D-Link DI-8100G router version 17.12.20A1 has a command injection vulnerability in the sub47A60C function located within the upgrade_filter.asp file. This flaw allows unauthorized commands to be executed on the device, potentially granting attackers remote control over its functionalities. Users of this router model are urged to review their security measures. Implementing network segmentation, regular firmware updates, and monitoring device logs can help safeguard against exploit attempts related to this vulnerability.",D-Link,Di-8100g Firmware,9.8,CRITICAL,0.0009800000116229057,false,false,false,false,,false,false,2024-09-06T00:00:00.000Z,0 CVE-2024-44402,https://securityvulnerability.io/vulnerability/CVE-2024-44402,Command Injection Vulnerability in D-Link DI-8100G Product,"The D-Link DI-8100G 17.12.20A1 is susceptible to a command injection flaw through the msp_info.htm component. This vulnerability allows an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized access and manipulation of device functionality. Users and administrators of the D-Link DI-8100G should take immediate action to assess their systems and apply necessary security updates to mitigate potential risks associated with this vulnerability.",D-Link,Di-8100g Firmware,9.8,CRITICAL,0.0009800000116229057,false,false,false,false,,false,false,2024-09-06T00:00:00.000Z,0