PT-2024-6454 · D Link · D-Link Dns-1200-05+16

Buaai0Tteam

·

Published

2024-04-04

·

Updated

2024-08-19

·

CVE-2024-7829

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 versions up to 20240814
Description The issue affects the function cgi del photo of the file /cgi-bin/photocenter mgr.cgi. The manipulation of the argument current path leads to buffer overflow. This can be exploited remotely. The products affected by this issue are no longer supported by the maintainer and should be retired and replaced.
Recommendations As a temporary workaround, consider disabling the cgi del photo function until the issue is resolved. Restrict access to the /cgi-bin/photocenter mgr.cgi file to minimize the risk of exploitation. Avoid using the current path argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-07540
CVE-2024-7829

Affected Products

D-Link Dnr-202L
D-Link Dnr-322L
D-Link Dns-326
D-Link Dns-1100-4
D-Link Dns-120
D-Link Dns-1200-05
D-Link Dns-1550-04
D-Link Dns-315L
D-Link Dns-320
D-Link Dns-321
D-Link Dns-323
D-Link Dns-325
D-Link Dns-327L
D-Link Dns-340L
D-Link Dns-343
D-Link Dns-345
D-Link Dns-726-4