CVE-2024-52777: Critical severity Unknown DCME-320 vulnerability
Published Nov 29, 2024
·Updated
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/licenseupdate.php.
Affected Software
12 affected components
Unknown DCME-320<=7.4.12.90
Unknown DCME-520<=9.25.5.11
Unknown DCME-320-L<=9.3.5.26
Unknown DCME-720<=9.1.5.11
All of the following
Dcnetworks Dcme-720 Firmware<=9.1.5.11
Dcnetworks Dcme-720
All of the following
Dcnetworks Dcme-320-l Firmware<=9.3.5.26
Dcnetworks Dcme-320-l
All of the following
Dcnetworks Dcme-320 Firmware<=7.4.12.90
Dcnetworks Dcme-320
All of the following
Dcnetworks Dcme-520 Firmware<=9.25.5.11
Dcnetworks Dcme-520
Event History
Nov 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-52777?
CVE-2024-52777 has been classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-52777?
To mitigate CVE-2024-52777, upgrade affected DCME software to the latest patched versions as specified by the vendor.
3
Which products are affected by CVE-2024-52777?
CVE-2024-52777 affects DCME-320, DCME-520, DCME-320-L, and DCME-720 across specific versions.
4
What exploit exists for CVE-2024-52777?
CVE-2024-52777 can be exploited via a vulnerable endpoint in /function/system/basic/license_update.php, allowing remote code execution.
5
Is there a known workaround for CVE-2024-52777?
Currently, there are no known workarounds for CVE-2024-52777; updating to secure versions is recommended.