CVE-2024-4962: D-Link DAR-7000-40 resmanage.php unrestricted upload

Published May 16, 2024

Updated

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-264530 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Affected Software

3 affected components

D-Link DAR-7000-40

All of the following

Dlink Dar-7000 Firmware=v31r02b1413c

Dlink Dar-7000

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove D-Link DAR-7000-40 V31R02B1413C (resmanage.php /useratte/resmanage.php) from your environment.
Retire and replace the end-of-life D-Link DAR-7000-40. This device version is affected by unrestricted upload via /useratte/resmanage.php (VDB-264530).
Compensating control
Because the product is end-of-life and the attack may be launched remotely, restrict network access to the management/UI functions that could reach /useratte/resmanage.php (e.g., allow only from trusted IPs via firewall/ACL).

Event History

May 16, 2024

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-4962?

CVE-2024-4962 is classified as a critical vulnerability.

How do I fix CVE-2024-4962?

To fix CVE-2024-4962, ensure that the device firmware is updated to the latest version provided by D-Link.

What are the consequences of exploiting CVE-2024-4962?

Exploiting CVE-2024-4962 allows unauthorized access and manipulation of system functions related to /useratte/resmanage.php.

Which devices are affected by CVE-2024-4962?

CVE-2024-4962 affects the D-Link DAR-7000-40 model with firmware version V31R02B1413C.

Is there a workaround for CVE-2024-4962?

Currently, there are no known workarounds for CVE-2024-4962, and users should prioritize updating their firmware.