CVE-2024-51151

Name of the Vulnerable Software and Affected Versions: D-Link DI-8200 version 16.07.26A1

Description: The issue allows for remote command execution in the msp info htm function via the flag parameter and cmd parameter.

Recommendations: For D-Link DI-8200 version 16.07.26A1, as a temporary workaround, consider restricting access to the msp info htm function until a patch is available. Avoid using the flag and cmd parameters in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.