PT-2023-8398 · D Link · D-Link Dir-859

Exord26 + 2 · Publicado 2023-12-15 · Atualizado 2026-06-14 · CVE-2024-0769

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-859 version 1.06B01

Description A critical vulnerability has been found in the D-Link DIR-859 router, affecting some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the service argument with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. This issue allows an attacker to gain information within the device and potentially gain full control over it. The attack may be launched remotely. The estimated number of potentially affected devices worldwide is not specified. However, it is mentioned that threat actors are actively exploiting this vulnerability.

Recommendations As a temporary workaround, consider disabling the /hedwig.cgi file until a replacement device is installed. Replace the D-Link DIR-859 router with a supported device as soon as possible, since the vendor has confirmed that the product is end-of-life and no patch will be provided.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2024-00635

CVE-2024-0769

Produtos afetados

D-Link Dir-859

Referências · 54

• 🔥 https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md · Exploit
• 🔥 https://github.com/c2dc/cve-reported · Exploit
• https://t.me/pentestingnews/43013 · Publicação no Telegram
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769 · Nota
• https://twitter.com/flash0verride/status/1940830354648285630 · Publicação no Twitter
• https://twitter.com/proficioinc/status/1808787846091661382 · Publicação no Twitter
• https://legacy.us.dlink.com/pages/product.aspx?id=a64612142a3041d98642960e5f840fb6 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-0769 · Nota de Segurança
• https://twitter.com/CVEnew/status/1748983387660947512 · Publicação no Twitter
• https://reddit.com/r/CVEWatch/comments/1lkwe8y/top_10_trending_cves_26062025 · Publicação no Reddit
• https://t.me/pentestingnews/48684 · Publicação no Telegram
• https://t.me/zerodayalert/263 · Publicação no Telegram
• https://twitter.com/Brandefense/status/1810313292436414654 · Publicação no Twitter
• https://vuldb.com/?id.251666 · Nota
• https://twitter.com/transilienceai/status/1809772458808946717 · Publicação no Twitter