di-7200gv2_firmware vulnerabilities

3 known vulnerabilities in di-7200gv2_firmware from D-Link. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  di-7003g_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2024-44335Sep 9, 2024D-LinkEPSS 12.4%

  D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution (RCE) via version_upgrade.asp.

• 8.8 High severity

  di-7003g_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2024-44334Sep 9, 2024D-LinkEPSS 31.8%

  D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution due to insufficient parameter filtering in the CGI handling

• 8.8 High severity

  di-7300g\+v2_firmware: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-44333Sep 9, 2024D-LinkEPSS 12.4%

  D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution. An attacker can achieve arbitrary command execution by send