How severe is CVE-2024-0769?

CVE-2024-0769 has a CVSS 3.1 base score of 5.3 (MEDIUM). EPSS estimates a 82.7% probability of exploitation in the next 30 days. It is listed in the CISA Known Exploited Vulnerabilities catalog.

CVE-2024-0769: D-Link DIR-859 HTTP POST Request hedwig.cgi path

CISA Known Exploited Vulnerabilities

D-Link DIR-859 Router Path Traversal Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV

2025-06-25

Remediation due

2025-07-16

Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA notes
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0769

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Severity

CVSS 3.1 · CNA5.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS 3.0 · CNA5.3 MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS 2.0 · CNA5 MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

SSVC · CISA-ADP

Exploitationactive

Automatableno

Technical impacttotal

Affected Products

Vendor	Product	Affected versions
D-Link	DIR-859	1.06B01

References

4 Links

Exploits & PoCs

https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md

Technical writeups

https://vuldb.com/?id.251666

Detection signatures

https://vuldb.com/?ctiid.251666

Other references

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371

Record Details

Published

2024-01-21

Last updated

2025-10-21

Assigner (CNA)

VulDB

Credited to

Françoa Taffarel; francoa.taffarel (VulDB User); francoa.taffarel (VulDB User)

More from D-Link

CVE-2024-32737.5

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

CVE-2024-327210

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

CVE-2026-41976.5

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

CVE-2026-14195.8

D-Link DCS700l Web Form setDayNightMode command injection

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CWE-22 · Path Traversal

Application Security Tools Penetration Testing Tools

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.