PT-2024-22874 · D Link · D-Link Dir-845L

주송아 · Published 2024-03-12 · Updated 2024-08-23 · CVE-2024-29385

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-845L router version 1.01KRb03 and earlier

Description The issue is related to an Unauthenticated remote code execution vulnerability in the cgibin binary via the soapcgi main function. This allows for remote code execution without authentication.

Recommendations For D-Link DIR-845L router version 1.01KRb03 and earlier, as a temporary workaround, consider disabling the soapcgi main function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-11293

CVE-2024-29385

Affected Products

D-Link Dir-845L

References · 8

• 🔥 https://github.com/songah119/Report/blob/main/CI-1.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-29385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29385 · Security Note
• https://bdu.fstec.ru/vul/2025-11293 · Security Note
• https://twitter.com/vuldb/status/1771252008433119724 · Twitter Post
• https://dlink.com/en/security-bulletin · Note
• https://twitter.com/CVEnew/status/1771223708385878420 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1771245875399930239 · Twitter Post