CVE-2024-5298
CVSS v3
8.8
HIGH
EPSS Score
4.1 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the queryDeviceCustomMonitorResult method. The issue results from an exposed dangerous method. An attacker can leverage this
Technical details
- CVSS v3 Vector
- 3.0
- Published
- 2024-05-23
- Last Modified
- 2025-08-06
Frequently asked questions
What is CVE-2024-5298?
D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the queryDeviceCustomMonitorResult method. The issue results from an exposed dangerous method. An attacker can leverage this
Is CVE-2024-5298 actively exploited?
Active exploitation of CVE-2024-5298 has not been confirmed. The EPSS score is 4.1%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-5298?
CVE-2024-5298 has a CVSS v3 base score of 8.8 (HIGH severity), with vector string 3.0.
Is CVE-2024-5298 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2024 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).