[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDcDrX55KmC-QCiN1ePKGCepZ-4aaSq1ragPpwpdHqY4":3,"g5a-risk:CVE-2024-13106":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":26,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":55,"references":56,"referencesCount":82,"weaknesses":83,"weaknessesCount":55,"isActivelyExploited":99,"cisaInfo":26,"otxData":26,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":139,"notableEvents":140},"CVE-2024-13106","What is CVE-2024-13106?","A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this issue is some unknown functionality of the file \u002Fgoform\u002Fform2IPQoSTcAdd of the component IP QoS Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.","A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this issue is some unknown functionality of the...","2025-01-02T12:15:16.94","2025-05-02T17:56:18.03",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"cna@vuldb.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":25,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":38,"AvailabilityImpact":23,"BaseScore":39,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,10,2.9,0.27198,[42,42,42,42,42,42,42],"Medium",[46,51],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"dlink","dir-816_firmware","1.10cnb05_r1b011d88210","cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05_r1b011d88210:*:*:*:*:*:*:*",{"vendor":47,"product":52,"version":53,"criteria":54,"vulnerable":4},"dir-816","a2","cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*",2,[57,62,67,72,75,80],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.com\u002Fabcdefg-png\u002FIoT-vulnerable\u002Fblob\u002Fmain\u002FUnauthorized_Vulnerability\u002FD-Link\u002FDIR-816\u002Fform2IPQoSTcAdd.md","GitHub",[61],"Broken Link",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fvuldb.com\u002F?ctiid.289922","Vuldb",[66],"Permissions Required",{"url":68,"source":64,"tags":69},"https:\u002F\u002Fvuldb.com\u002F?id.289922",[70,71],"Third Party Advisory","VDB Entry",{"url":73,"source":64,"tags":74},"https:\u002F\u002Fvuldb.com\u002F?submit.472086",[70,71],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.dlink.com\u002F","Dlink",[79],"Product",{"url":58,"source":59,"tags":81},[61],6,[84,92],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":91},"CWE-266","Incorrect Privilege Assignment","A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.","","Draft","Base",false,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2024-13106? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-13106, a medium severity cyber security vulnerability from 2025. A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_...","CVE-2024-13106, CVE-2024-13106 vulnerability, CVE-2024-13106 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, dlink security, dir-816_firmware vulnerability, dir-816 vulnerability","\u002Fwhat-is\u002Fcve-2024-13106",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-13106","Cybersecurity","CVE-2024-13106, CVE-2024-13106 vulnerability, CVE-2024-13106 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":128,"Negate":26,"Nodes":129},"AND",[130,135],{"Operator":131,"Negate":26,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6494A725-3860-4428-A0F3-076605CAF7F2",{"Operator":131,"Negate":26,"CPEMatch":136},[137],{"Vulnerable":26,"Criteria":54,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1A3AC507-7219-401E-AC60-12D96382E4B7",[],[141],{"id":142,"eventType":143,"eventTime":144,"details":145,"label":146,"color":147},"551a5c03-89ff-473d-a1e2-0459df7ed8e9","HIGH_EPSS_DELTA","2026-06-16T04:04:51.139878+00:00","Daily EPSS score increased by 0.277 on 2025-01-04","EPSS Score Increased","red",{"lastModified":11,"cacheTime":149,"version":36},1793217306556,{"score":151,"band":152,"action":153,"scoredAt":154},33,"Low","Monitor","2026-07-01T10:34:52.830344+00:00"]