PT-2024-6456 · D Link · D-Link Dns-1200-05+16

Buaai0Tteam

·

Published

2024-04-04

·

Updated

2024-08-19

·

CVE-2024-7830

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 versions up to 20240814
Description The issue is related to a buffer overflow vulnerability in the cgi move photo() function of the /cgi-bin/photocenter mgr.cgi file. This vulnerability can be exploited remotely by manipulating the photo name argument, allowing an attacker to execute arbitrary commands using a specially crafted POST request. The vulnerability affects products that are no longer supported by the maintainer and should be retired and replaced.
Recommendations As a temporary workaround, consider disabling the cgi move photo() function until the issue is resolved. Restrict access to the /cgi-bin/photocenter mgr.cgi file to minimize the risk of exploitation. Avoid using the photo name argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-07542
CVE-2024-7830

Affected Products

D-Link Dnr-202L
D-Link Dnr-322L
D-Link Dns-326
D-Link Dns-1100-4
D-Link Dns-120
D-Link Dns-1200-05
D-Link Dns-1550-04
D-Link Dns-315L
D-Link Dns-320
D-Link Dns-321
D-Link Dns-323
D-Link Dns-325
D-Link Dns-327L
D-Link Dns-340L
D-Link Dns-343
D-Link Dns-345
D-Link Dns-726-4