CVE-2024-4965: D-Link DAR-7000-40 resmanage.php os command injection

Published May 16, 2024

Updated

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264533 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Affected Software

3 affected components

D-Link DAR-7000-40

All of the following

Dlink Dar-7000 Firmware=31r02b1413c

Dlink Dar-7000

Event History

May 16, 2024

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Apr 3, 58462

Event

via NVD·05:19 AM

Frequently Asked Questions

What is the severity of CVE-2024-4965?

CVE-2024-4965 is classified as a critical vulnerability.

What type of vulnerability is CVE-2024-4965?

CVE-2024-4965 is an OS command injection vulnerability.

How do I fix CVE-2024-4965?

To fix CVE-2024-4965, update your D-Link DAR-7000-40 device to the latest firmware version.

What affects CVE-2024-4965?

CVE-2024-4965 affects the D-Link DAR-7000-40 V31R02B1413C device's handling of the /useratte/resmanage.php file.

Can CVE-2024-4965 be exploited remotely?

Yes, CVE-2024-4965 can be exploited remotely due to the command injection vulnerability.