Medium severity5.3NVD Advisory· Published Dec 17, 2024· Updated Jun 17, 2026

CVE-2024-36831

Description

A NULL pointer dereference in the plugins_call_handle_uri_clean function of D-Link DAP-1520 REVA_FIRMWARE_1.10B04_BETA02_HOTFIX allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dap 1520 Firmware
cpe:2.3:o:dlink:dap-1520_firmware:1.10b04:beta02:*:*:*:*:*:*
Dlink/DAP-1522cpe-rescue
Dlink/DAP-1520llm-create
Range: REVA_FIRMWARE_1.10B04_BETA02_HOTFIX

Patches

Vulnerability mechanics

References

supportannouncement.us.dlink.com/security/publication.aspxnvdVendor Advisory
docs.google.com/document/d/15CVb7XHIgtfeW1W1pLZJWvlBMYN1rtr75vqZqf1v3Eo/editnvdPermissions Required
www.dlink.com/ennvdProduct
www.dlink.com/en/security-bulletin/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000