PT-2024-9920 · D Link · D-Link Dir-823G

Wxhwxhwxh_Mie · Published 2024-12-23 · Updated 2025-07-15 · CVE-2024-13030

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 20181207

Description: A critical issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface, leading to improper access controls. The attack may be initiated remotely. The manipulation can be exploited by sending a specially crafted HTTP POST request. The issue is related to errors in managing privileges.

Recommendations: As a temporary workaround, consider disabling the affected functions SetAutoRebootSettings, SetClientInfo, SetDMZSettings, SetFirewallSettings, SetParentsControlInfo, SetQoSSettings, SetVirtualServerSettings until a patch is available. Restrict access to the vulnerable component Web Management Interface to minimize the risk of exploitation. Avoid using the vulnerable file /HNAP1/ in the Web Management Interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

BDU:2025-00030

CVE-2024-13030

Affected Products

D-Link Dir-823G

References · 18

• 🔥 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-823G/SetAutoRebootSettings.md · Exploit
• https://bdu.fstec.ru/vul/2025-00030 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-13030 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13030 · Vendor Advisory
• https://vuldb.com/?id.289763 · Note
• https://twitter.com/cracbot/status/1875421951751286850 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1873545696986485166 · Twitter Post
• https://t.me/cvedetector/13910 · Telegram Post
• https://t.me/cvenotify/129071 · Telegram Post
• https://twitter.com/cracbot/status/1875059572861469038 · Twitter Post
• https://vuldb.com/?submit.467903 · Note
• https://vuldb.com/?ctiid.289763 · Note
• https://t.me/cvenotify/105729 · Telegram Post
• https://twitter.com/SystemTek_UK/status/1874015206558359568 · Twitter Post
• https://twitter.com/CVEnew/status/1873555084807950796 · Twitter Post