Medium severity6.8NVD Advisory· Published Jun 27, 2024· Updated Jun 17, 2026

CVE-2024-36755

Description

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmware version or change the downloading URL via a man-in-the-middle attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir 1950 Firmware
cpe:2.3:o:dlink:dir-1950_firmware:*:*:*:*:*:*:*:*
Range: <=1.11b03
Dlink/DIR-1950cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.11B03

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/security/publication.aspxnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000