CVE-2024-37605

6.5 mediumEPSS 0.7%

Medium (6.5) in dlink dir-860l firmware. EPSS 0.7% chance of exploitation in the next 30 days.

A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2024-12-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dlink:dir-860l_firmware

References

https://docs.google.com/document/d/1cWlVLaVvr_xzkqbKIXY7EW89hNHE89SSlNtesv6lzl8/edit?usp=sharing
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10397
https://www.dlink.com/en
https://www.dlink.com/en/security-bulletin/

Check your stack JSON