PT-2024-6458 · D Link · D-Link Dns-1200-05+16

Buaai0Tteam

·

Published

2024-04-04

·

Updated

2024-08-19

·

CVE-2024-7849

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 up to 20240814
Description A critical issue affects the function cgi create album of the file /cgi-bin/photocenter mgr.cgi. The manipulation of the argument current path leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer. The vendor confirmed that the product is end-of-life and should be retired and replaced.
Recommendations As a temporary workaround, consider disabling the cgi create album function until the issue is resolved. Restrict access to the /cgi-bin/photocenter mgr.cgi file to minimize the risk of exploitation. Avoid using the current path argument in the affected API endpoint until the issue is resolved. Since the products are end-of-life, the recommended course of action is to retire and replace them. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-07544
CVE-2024-7849

Affected Products

D-Link Dnr-202L
D-Link Dnr-322L
D-Link Dns-326
D-Link Dns-1100-4
D-Link Dns-120
D-Link Dns-1200-05
D-Link Dns-1550-04
D-Link Dns-315L
D-Link Dns-320
D-Link Dns-321
D-Link Dns-323
D-Link Dns-325
D-Link Dns-327L
D-Link Dns-340L
D-Link Dns-343
D-Link Dns-345
D-Link Dns-726-4