CVE-2024-7830: D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. Affected is the function cgimovephoto of the file /cgi-bin/photocentermgr.cgi. The manipulation of the argument photoname leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7830?
CVE-2024-7830 is classified as a critical vulnerability.
What products are affected by CVE-2024-7830?
CVE-2024-7830 affects various D-Link products including DNS-120, DNR-202L, and several models in the DNS series.
How do I fix CVE-2024-7830?
To fix CVE-2024-7830, update your affected D-Link devices to the latest firmware version provided by D-Link.
What are the potential risks of CVE-2024-7830?
The risks associated with CVE-2024-7830 include unauthorized access and potential data breaches.
Is there a workaround for CVE-2024-7830?
Currently, it is recommended to immediately apply security updates as a workaround for CVE-2024-7830.