CVE-2024-0769 D-Link DIR-859 Router
D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation…
- CVSS
- not scored
On CISA’s exploited list
D-Link DIR-859 Router Path Traversal Vulnerability
- Added
- 2025-06-25
- Federal patch deadline
- 2025-07-16
- Ransomware use
- not known