CVE-2024-10914

CVE-2024-10914 affects D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. A vulnerable component is cgi_user_add in /cgi-bin/account_mgr.cgi?cmd=cgi_user_add, where improper handling of the name parameter enables OS command injection. Remote exploitation is possible; public PoCs/expl...

D-Link多款产品 安全漏洞

D-Link DNS-320 and others are a NAS Network Attached Storage device from China's AUO D-Link. A security vulnerability exists in various D-Link products, which stems from an incorrect operation of the parameter group that can lead to operating system command injection. The following products and...

PT-2024-7982

Name of the Vulnerable Software and Affected Versions D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L versions up to 20241028 Description A critical issue exists in the cgi user add function of the file /cgi-bin/account mgr.cgi?cmd=cgi user add within the affected D-Link devices. Manipulation of...

PT-2024-7983 · D Link · D-Link Dns-320 +2

Name of the Vulnerable Software and Affected Versions: D-Link DNS-320 versions up to 20241028 D-Link DNS-320LW versions up to 20241028 D-Link DNS-325 versions up to 20241028 D-Link DNS-340L versions up to 20241028 Description: The issue is related to insufficient protection of service data in the...

CVE-2024-10914: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads to os command...

CVE-2024-10915: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. T...

CVE-2024-10916: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiat...

CVE-2024-51115

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

CVE-2024-51115

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

Digital China Networks DCME-320 安全漏洞

Digital China Networks DCME-320 is a wireless router from Digital China Networks China. A security vulnerability exists in the Digital China Networks DCME-320 version v7.4.12.90, which stems from vulnerability to command injection attacks...

CVE-2024-51115

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

CVE-2024-51115

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

CVE-2024-51115: Improper Neutralization of Special Elements used in a Command

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

CVE-2024-51115

The Digital China Networks DCME-320 wireless router, specifically version v7.4.12.90 , is vulnerable to a command injection vulnerability (CWE-77). An attacker could potentially execute arbitrary commands on the device due to improper neutralization of special elements used in commands. The vulne...

PT-2024-34528 · Dcme-320 · Dcme-320

Name of the Vulnerable Software and Affected Versions: DCME-320 version 7.4.12.90 Description: A command injection issue was discovered. Recommendations: For DCME-320 version 7.4.12.90, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

An issue in DCME-320-L =9.3.2.114 allows a remote attacker to execute arbitrary code via the loguumount.php component...

CVE-2024-48659

Digital China Networks DCME-320-L wireless routers (versions 9.3.2.114 and earlier) are vulnerable to a command injection flaw in the log_u_umount.php component. A remote attacker can exploit this issue to execute arbitrary code on the affected device. To mitigate this risk, users are recommended...

PT-2024-33178 · Unknown · Dcme-320-L

Name of the Vulnerable Software and Affected Versions: DCME-320-L versions prior to 9.3.2.114 Description: The issue allows a remote attacker to execute arbitrary code via the log u umount.php component. Recommendations: For versions prior to 9.3.2.114, update to a version that contains a fix for...