1. Home
  2. CVE Database
  3. CVE-2024-36755
MEDIUM · 6.8

CVE-2024-36755

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change ...

Vulnerability Description

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
DlinkDir-1950 Firmware<= 1.11b03
DlinkDir-1950-

Related Weaknesses (CWE)

CWE-599

References

FAQ

What is CVE-2024-36755?

CVE-2024-36755 is a vulnerability with a CVSS score of 6.8 (MEDIUM). D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change ...

How severe is CVE-2024-36755?

CVE-2024-36755 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-36755?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-1950 Firmware, Dlink Dir-1950.