CVE-2024-9792mediumCWE-79

CVE-2024-9792: medium-severity vulnerability in D-Link DSL-2750U

D-Link DSL-2750U Port Forwarding Page cross site scripting

Published

Follow this CVE+ Monitor DSL-2750U

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.7%
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
D-Link · DSL-2750U
Related CVEs — D-Link DSL-2750U

In the same product, most dangerous first.

CVE-2021-3708—CVE-2021-3708EPSS 24.6%CVE-2024-0717MEDIUMD-Link Good Line Router v2 HTTP GET Request devinfo information disclosureEPSS 18.2%CVE-2019-1010155—CVE-2019-1010155EPSS 8.6%CVE-2021-3707—CVE-2021-3707EPSS 1.5%CVE-2025-34048HIGHD-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File ReadEPSS 0.7%