CVE-2024-13105

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210

Description A critical issue has been found in the DHCPD Setting Handler component, specifically affecting an unknown functionality of the file /goform/form2Dhcpd.cgi. This issue leads to improper access controls and can be exploited remotely. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider restricting access to the /goform/form2Dhcpd.cgi file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.