CVE-2024-24321: D-Link Dir-816 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.

Affected products

• D-Link Dir-816 Firmware: version 1.10cnb05 only

Published 2024-02-08. Last modified 2026-07-09.