DAP-1650 vulnerabilities

2 known vulnerabilities in DAP-1650 from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DAP-1650: Improper Neutralization of Special Elements used in a Command

  CVE-2024-23625Jan 26, 2024D-LinkEPSS 7.29%

  A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

• 9.8 Critical severity

  DAP-1650: Improper Neutralization of Special Elements used in a Command

  CVE-2024-23624Jan 26, 2024D-LinkEPSS 7.14%

  A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.