CVE-2024-13030: medium-severity vulnerability in D-Link DIR-823G
D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
35Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendcvss 6.9epss 2.0%
from disclosure to weapon
Published on NVDDec 30
VulnCheck+437d
A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
D-Link · DIR-823GRelated CVEs — D-Link DIR-823G
In the same product, most dangerous first.
CVE-2025-2359MEDIUMD-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorizationEPSS 15.4%CVE-2025-2360MEDIUMD-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorizationEPSS 4.2%CVE-2026-90680CRITICALD-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowEPSS 0.9%CVE-2026-4193MEDIUMD-Link DIR-823G goahead UpdateClientInfo access controlEPSS 0.8%CVE-2026-11492MEDIUMD-Link DIR-823G vsftpd vsftpd.conf least privilege violationEPSS 0.5%