CVE-2024-48634: D-Link Dir-878 Firmware

High severity, CVSS 8.0. EPSS: 17.6% chance of exploitation in the next 30 days.

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

Affected products

• D-Link Dir-878 Firmware: version 1.30b08 only
• D-Link Dir-882 Firmware: version 1.30b06 only

Published 2024-10-17. Last modified 2026-06-17.