PT-2024-32324 · D Link · D-Link Dar-8000-10

Schnee · Published 2024-05-10 · Updated 2025-07-16 · CVE-2024-4699

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DAR-8000-10 up to 20230922

Description A critical issue has been found in the processing of the file /importhtml.php, where the manipulation of the sql argument leads to deserialization. This issue can be exploited remotely. The product is end-of-life and should be retired and replaced.

Recommendations For D-Link DAR-8000-10 up to 20230922, the recommended course of action is to retire and replace the product, as it is no longer supported by the maintainer.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-4699

Affected Products

D-Link Dar-8000-10

References · 9

• 🔥 https://github.com/I-Schnee-I/cev/blob/main/D-LINK-DAR-8000-10_rce_importhtml.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4699 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4699 · Vendor Advisory
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354 · Vendor Advisory
• https://vuldb.com/?submit.331311 · Note
• https://vuldb.com/?ctiid.263747 · Note
• https://t.me/cvenotify/129163 · Telegram Post
• https://t.me/cvenotify/88343 · Telegram Post
• https://vuldb.com/?id.263747 · Note