Description

A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it will crash and exit due to a null pointer reference, leading to a denial of service attack to the device.

INFO

Published Date :

2024-12-17T00:00:00.000Z

Last Modified :

2024-12-17T16:49:12.300Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2024-36832 vulnerability.

Vendors Products
Dlink
  • Dap-1513
  • Dap-1513 Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-36832.

URL Resource
https://docs.google.com/document/d/1qTpwAg7B5E4mqkBzijjuoOWWnf3OE1HXIKBv7OcS8Mc/edit?usp=sharing cve-icon cve-icon
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10396 cve-icon cve-icon
https://www.dlink.com/en cve-icon cve-icon
https://www.dlink.com/en/security-bulletin/ cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact