Cyber Resilience

CVE-2024-27658

Dlink Dir-823G Firmware 1.0.2b05

Public PoC
Published
29 February 2024
Modified
17 June 2026
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0064 48th percentile
Risk Priority 51 floored blend · peak EPSS

Summary

CVE-2024-27658 is a medium-severity Use of NullPointerException Catch to Detect NULL Pointer Dereference (CWE-395) vulnerability in Dlink Dir-823G Firmware. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 48th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SA-15 (Development Process, Standards, and Tools) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

CWE(s)
CWE-395

Related Threats

CVEs Like This One

CVE-2024-27659Same product: Dlink Dir-823G
CVE-2024-27661Same product: Dlink Dir-823G
CVE-2024-27662Same product: Dlink Dir-823G
CVE-2023-26612Same product: Dlink Dir-823G
CVE-2023-43235Same product: Dlink Dir-823G
CVE-2023-44835Same product: Dlink Dir-823G
CVE-2024-51023Same product: Dlink Dir-823G
CVE-2023-26616Same product: Dlink Dir-823G
CVE-2024-51024Same product: Dlink Dir-823G
CVE-2024-13030Same product: Dlink Dir-823G

Affected Assets

dlink
dir-823g firmware
1.0.2b05

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SA-11 Developer Testing and Evaluation good match

Developer testing and evaluation can discover catch blocks used for null detection during code review or dynamic analysis.

SA-15 Development Process, Standards, and Tools partial match

Documented development standards and tools can mandate explicit null checks instead of relying on exception handlers.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly enforce proper null handling via reviews and tooling rather than exception catching.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
finds

Security testing can detect improper exception handling but does not prevent the coding practice itself.

A.8.28 Secure coding partial match
prevents

Secure coding rules explicitly forbid catching NullPointerException to detect null dereferences.

References