D-Link Di 8004w Firmware vulnerabilities

2 CVEs affecting D-Link Di 8004w Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-44382, published 2024-08-23.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-44382, published 2024-08-23. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in the jhttpd upgrade_filter_asp function.
• CVE-2024-44381, published 2024-08-23. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in jhttpd msp_info_htm function.