CVE-2024-44382

Name of the Vulnerable Software and Affected Versions D-Link DI 8004W version 16.07.26A1

Description The issue is related to a command execution vulnerability in the jhttpd upgrade filter asp function. This vulnerability may allow a remote attacker to execute arbitrary commands. The vulnerability is associated with the lack of data cleaning measures at the management level.

Recommendations For D-Link DI 8004W version 16.07.26A1, upgrade to version 16.07.27A1 to remediate the issue. As a temporary workaround, consider restricting access to the jhttpd upgrade filter asp function until the patch is applied.