CVE-2024-25331 DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Over...

CriticalCVSS 9.3 EPSS 0.33%

Published: 2024-03-12 03:29 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 10:15
Exploit status: No public exploit known

Description

DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow.

Affected products

Product	Affected versions	Fixed in
dlink dir-822 firmware	= 2.02krb09	No fix listed
dlink dir-822 firmware	= 2.03wwb01	No fix listed

References

CVSS v3.1

9.3 Critical

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector: Local
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Changed
Confidentiality: High
Integrity: High
Availability: High

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.33% (percentile 27.2)
CWE: CWE-121 Stack-based Buffer Overflow

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.