{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability · updates",
  "home_page_url": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769",
  "feed_url": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769/feed.json",
  "description": "D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions. Added to CISA KEV on 2025-06-25.",
  "language": "en",
  "_pwn": {
    "slug": "d-link-dir-859-router-cve-2024-0769",
    "severity": "medium",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769/feed.xml",
    "llms": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769/llms.txt",
    "json": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769#2025-06-25-071a2a4e",
      "url": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769#2025-06-25-071a2a4e",
      "title": "D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability: CISA added CVE-2024-0769 to the KEV catalog (due 2025-07-16).",
      "content_text": "D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability: CISA added CVE-2024-0769 to the KEV catalog (due 2025-07-16).",
      "date_published": "2025-06-25T00:00:00.000Z",
      "tags": [
        "medium"
      ]
    }
  ]
}