ID
VAR-202412-0623
CVE
CVE-2024-36832
TITLE
D-Link Systems, Inc. of DAP-1513 in the firmware NULL Pointer dereference vulnerability
Trust: 0.8
DESCRIPTION
A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it will crash and exit due to a null pointer reference, leading to a denial of service attack to the device. D-Link Systems, Inc. of DAP-1513 The firmware has NULL There is a vulnerability in pointer dereference.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. D-Link DAP-1513 is a wireless bridge produced by D-Link of China. Attackers can exploit this vulnerability to cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dap-1513 | scope: | eq | version: | 1.01 | Trust: 1.0 |
| vendor: | d link | model: | dap-1513 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dap-1513 | scope: | eq | version: | dap-1513 firmware 1.01 | Trust: 0.8 |
| vendor: | d link | model: | dap-1513 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dap-1513 reva 1.01 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-476 | Trust: 1.0 |
| problemtype: | NULL Pointer dereference (CWE-476) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-36832 | Trust: 3.2 |
| db: | DLINK | id: | SAP10396 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2024-024222 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-49512 | Trust: 0.6 |
REFERENCES
| url: | https://supportannouncement.us.dlink.com/security/publication.aspx?name=sap10396 | Trust: 1.8 |
| url: | https://www.dlink.com/en | Trust: 1.8 |
| url: | https://www.dlink.com/en/security-bulletin/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-36832 | Trust: 1.4 |
| url: | https://docs.google.com/document/d/1qtpwag7b5e4mqkbzijjuoowwnf3oe1hxikbv7ocs8mc/edit?usp=sharing | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2024-49512 |
| db: | JVNDB | id: | JVNDB-2024-024222 |
| db: | NVD | id: | CVE-2024-36832 |
LAST UPDATE DATE
2025-05-28T23:25:09.379000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-49512 | date: | 2024-12-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-024222 | date: | 2025-05-27T05:55:00 |
| db: | NVD | id: | CVE-2024-36832 | date: | 2025-05-21T13:21:05.300 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-49512 | date: | 2024-12-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-024222 | date: | 2025-05-27T00:00:00 |
| db: | NVD | id: | CVE-2024-36832 | date: | 2024-12-17T15:15:13.097 |