{"history":[{"alert":0,"cve":"CVE-2024-0769","id":22614,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.82714, \"percentile\": 0.99673}"},{"alert":0,"cve":"CVE-2024-0769","id":20234,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.82714, \"percentile\": 0.99672}"},{"alert":0,"cve":"CVE-2024-0769","id":18203,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.82714, \"percentile\": 0.99671}"},{"alert":0,"cve":"CVE-2024-0769","id":16267,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.82714, \"percentile\": 0.99671}"},{"alert":0,"cve":"CVE-2024-0769","id":14245,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.82714, \"percentile\": 0.9967}"},{"alert":0,"cve":"CVE-2024-0769","id":12027,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.82714, \"percentile\": 0.9967}"},{"alert":0,"cve":"CVE-2024-0769","id":10013,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.82714, \"percentile\": 0.9967}"},{"alert":0,"cve":"CVE-2024-0769","id":7561,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.82714, \"percentile\": 0.99669}"},{"alert":1,"cve":"CVE-2024-0769","id":6175,"kind":"cna","observed_at":1793787601,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-01T18:18:18.263Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"vdb-entry\", \"technical-description\", \"x_transferred\"], \"url\": \"https://vuldb.com/?id.251666\"}, {\"tags\": [\"signature\", \"permissions-required\", \"x_transferred\"], \"url\": \"https://vuldb.com/?ctiid.251666\"}, {\"tags\": [\"exploit\", \"x_transferred\"], \"url\": \"https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md\"}, {\"tags\": [\"related\", \"x_transferred\"], \"url\": \"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371\"}], \"title\": \"CVE Program Container\"}, {\"affected\": [{\"cpes\": [\"cpe:2.3:o:dlink:dir-859_firmware:1.06b01:beta01:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"dir-859_firmware\", \"vendor\": \"dlink\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.06b01\"}]}], \"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2024-0769\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-06-26T03:55:24.432923Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-06-25\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:05:27.747Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://nvd.nist.gov/vuln/detail/CVE-2024-0769\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-06-25T00:00:00.000Z\", \"value\": \"CVE-2024-0769 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"modules\": [\"HTTP POST Request Handler\"], \"product\": \"DIR-859\", \"vendor\": \"D-Link\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.06B01\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Fran\\u00e7oa Taffarel\"}, {\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"francoa.taffarel (VulDB User)\"}, {\"lang\": \"en\", \"type\": \"analyst\", \"value\": \"francoa.taffarel (VulDB User)\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.\"}, {\"lang\": \"de\", \"value\": \"Eine kritische Schwachstelle wurde in D-Link DIR-859 1.06B01 ausgemacht. Es geht hierbei um eine nicht n\\u00e4her spezifizierte Funktion der Datei /hedwig.cgi der Komponente HTTP POST Request Handler. Durch Manipulieren des Arguments service mit der Eingabe ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Der Angriff kann \\u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \\u00f6ffentlichen Verf\\u00fcgung.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\", \"version\": \"3.1\"}}, {\"cvssV3_0\": {\"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\", \"version\": \"3.0\"}}, {\"cvssV2_0\": {\"baseScore\": 5, \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"version\": \"2.0\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-22\", \"description\": \"CWE-22 Path Traversal\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-01-21T08:00:05.383Z\", \"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\"}, \"references\": [{\"tags\": [\"vdb-entry\", \"technical-description\"], \"url\": \"https://vuldb.com/?id.251666\"}, {\"tags\": [\"signature\", \"permissions-required\"], \"url\": \"https://vuldb.com/?ctiid.251666\"}, {\"tags\": [\"exploit\"], \"url\": \"https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md\"}, {\"tags\": [\"related\"], \"url\": \"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371\"}], \"tags\": [\"unsupported-when-assigned\"], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-01-20T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2024-01-20T01:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2024-01-20T23:03:37.000Z\", \"value\": \"VulDB entry last update\"}], \"title\": \"D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal\"}}, \"cveMetadata\": {\"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"assignerShortName\": \"VulDB\", \"cveId\": \"CVE-2024-0769\", \"datePublished\": \"2024-01-21T08:00:05.383Z\", \"dateReserved\": \"2024-01-20T15:12:52.576Z\", \"dateUpdated\": \"2025-10-21T23:05:27.747Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2024-0769","id":5338,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.82714, \"percentile\": 0.99668}"},{"alert":0,"cve":"CVE-2024-0769","id":3120,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.82714, \"percentile\": 0.99668}"},{"alert":1,"cve":"CVE-2024-0769","id":398,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-0769\", \"cwes\": [\"CWE-22\"], \"dateAdded\": \"2025-06-25\", \"dueDate\": \"2025-07-16\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0769\", \"product\": \"DIR-859 Router\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.\", \"vendorProject\": \"D-Link\", \"vulnerabilityName\": \" D-Link DIR-859 Router Path Traversal Vulnerability\"}"}],"record":{"affected":[{"modules":["HTTP POST Request Handler"],"product":"DIR-859","vendor":"D-Link","versions":[{"status":"affected","version":"1.06B01"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-01T18:18:18.263Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["vdb-entry","technical-description","x_transferred"],"url":"https://vuldb.com/?id.251666"},{"tags":["signature","permissions-required","x_transferred"],"url":"https://vuldb.com/?ctiid.251666"},{"tags":["exploit","x_transferred"],"url":"https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md"},{"tags":["related","x_transferred"],"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371"}],"title":"CVE Program Container"},{"affected":[{"cpes":["cpe:2.3:o:dlink:dir-859_firmware:1.06b01:beta01:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dir-859_firmware","vendor":"dlink","versions":[{"status":"affected","version":"1.06b01"}]}],"metrics":[{"other":{"content":{"id":"CVE-2024-0769","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-26T03:55:24.432923Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-06-25","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:27.747Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0769"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769"}],"timeline":[{"lang":"en","time":"2025-06-25T00:00:00.000Z","value":"CVE-2024-0769 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"modules":["HTTP POST Request Handler"],"product":"DIR-859","vendor":"D-Link","versions":[{"status":"affected","version":"1.06B01"}]}],"credits":[{"lang":"en","type":"finder","value":"Fran\u00e7oa Taffarel"},{"lang":"en","type":"reporter","value":"francoa.taffarel (VulDB User)"},{"lang":"en","type":"analyst","value":"francoa.taffarel (VulDB User)"}],"descriptions":[{"lang":"en","value":"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced."},{"lang":"de","value":"Eine kritische Schwachstelle wurde in D-Link DIR-859 1.06B01 ausgemacht. Es geht hierbei um eine nicht n\u00e4her spezifizierte Funktion der Datei /hedwig.cgi der Komponente HTTP POST Request Handler. Durch Manipulieren des Arguments service mit der Eingabe ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}],"metrics":[{"cvssV3_1":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}},{"cvssV3_0":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.0"}},{"cvssV2_0":{"baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Path Traversal","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-01-21T08:00:05.383Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.251666"},{"tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.251666"},{"tags":["exploit"],"url":"https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md"},{"tags":["related"],"url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371"}],"tags":["unsupported-when-assigned"],"timeline":[{"lang":"en","time":"2024-01-20T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2024-01-20T01:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2024-01-20T23:03:37.000Z","value":"VulDB entry last update"}],"title":"D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal"}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2024-0769","datePublished":"2024-01-21T08:00:05.383Z","dateReserved":"2024-01-20T15:12:52.576Z","dateUpdated":"2025-10-21T23:05:27.747Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2024-0769","description":"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.","epss":{"date":"2026-11-12","epss":0.82714,"percentile":0.99673},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-0769","cwes":["CWE-22"],"dateAdded":"2025-06-25","dueDate":"2025-07-16","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0769","product":"DIR-859 Router","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","vendorProject":"D-Link","vulnerabilityName":" D-Link DIR-859 Router Path Traversal Vulnerability"},"kev_checked":1794522003,"products":"D-Link DIR-859","references":["https://vuldb.com/?id.251666","https://vuldb.com/?ctiid.251666","https://github.com/c2dc/cve-reported/blob/main/CVE-2024-0769/CVE-2024-0769.md","https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371","https://nvd.nist.gov/vuln/detail/CVE-2024-0769","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0769"],"score":{"baseScore":5.3,"baseSeverity":"MEDIUM","provider":"VulDB","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal","updated_at":1794500401,"workarounds":""},"sources":[]}