PT-2026-29347 · D Link · Dns-325+18

Ziyue Xie · Publicado 2026-03-31 · Atualizado 2026-04-01 · CVE-2026-5212

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DNS-120 D-Link DNR-202L D-Link DNS-315L D-Link DNS-320 D-Link DNS-320L D-Link DNS-320LW D-Link DNS-321 D-Link DNR-322L D-Link DNS-323 D-Link DNS-325 D-Link DNS-326 D-Link DNS-327L D-Link DNR-326 D-Link DNS-340L D-Link DNS-343 D-Link DNS-345 D-Link DNS-726-4 D-Link DNS-1100-4 D-Link DNS-1200-05 D-Link DNS-1550-04 versions prior to 20260205

Description A stack-based buffer overflow issue exists in the Webdav Upload File function located in the /cgi-bin/webdav mgr.cgi file. The issue is triggered by manipulating the f file argument. This allows for remote exploitation. The exploit has been publicly disclosed.

Recommendations Update devices to the latest firmware version available.

Exploit

Correção

Memory Corruption

Stack Overflow

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-121

CWE-119

Identificadores relacionados

CVE-2026-5212

Produtos afetados

Dnr-202L

Dnr-322L

Dnr-326

Dns-1100-4

Dns-120

Dns-1200-05

Dns-1550-04

Dns-315L

Dns-320

Dns-320L

Dns-321

Dns-323

Dns-325

Dns-326

Dns-327L

Dns-340L

Dns-343

Dns-345

Dns-726-4

Referências · 9

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_166/166.md · Exploit, Deleted
• https://vuldb.com/submit/780436 · Nota
• https://twitter.com/ptdbugs/status/2039293462663528931 · Publicação no Twitter
• https://vuldb.com/submit/780435 · Nota
• https://twitter.com/CveFindCom/status/2039096183721796081 · Publicação no Twitter
• https://vuldb.com/vuln/354348 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-5212 · Nota de Segurança
• https://vuldb.com/vuln/354348/cti · Nota
• https://dlink.com · Nota