Lucene search
+L

CVE-2024-7849

🗓️ 15 Aug 2024 23:31:06Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

A critical buffer overflow vulnerability in unsupported D-Link storage devices up to 20240814 allows remote attacks via cgi_create_album in /cgi-bin/photocenter_mgr.cgi

Related
Detection
Affected
Refs
Paths
Vulners
Vulnrichment
Node
OR
dlinkdns-120Match20240814
dlinkdnr-202lMatch20240814
dlinkdns-315lMatch20240814
dlinkdns-320Match20240814
d-linkdns-320lMatch20240814
d-linkdns-320lwMatch20240814
d-linkdns-321Match20240814
dlinkdnr-322lMatch20240814
dlinkdns-323Match20240814
d-linkdns-325Match20240814
dlinkdns-326Match20240814
d-linkdns-327lMatch20240814
d-linkdnr-326Match20240814
dlinkdns-340lMatch20240814
dlinkdns-343Match20240814
d-linkdns-345Match20240814
dlinkdns-726-4Match20240814
dlinkdns-1100-4Match20240814
dlinkdns-1200-05Match20240814
dlinkdns-1550-04Match20240814
[
  {
    "vendor": "D-Link",
    "product": "DNS-120",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNR-202L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-315L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-320",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-320L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-320LW",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-321",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNR-322L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-323",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-325",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-326",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-327L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNR-326",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-340L",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-343",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-345",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-726-4",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-1100-4",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-1200-05",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "D-Link",
    "product": "DNS-1550-04",
    "versions": [
      {
        "version": "20240814",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
current_pathquery param/cgi-bin/photocenter_mgr.cgiBuffer overflow in photocenter_mgr.cgi via manipulated current_path parameterCWE-120

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:21Current
8.9High risk
Vulners AI Score8.9
CVSS 48.7
CVSS 3.18.8
CVSS 29
CVSS 38.8
EPSS0.0117
SSVC
91