CVE-2024-7830: D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow

First published: Thu Aug 15 2024(Updated: )

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. Affected is the function cgi_move_photo of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument photo_name leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

Credit: cna@vuldb.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/title
• agent/type
• agent/description
• agent/first-publish-date
• agent/author
• agent/event
• agent/references
• collector/epss-latest
• source/FIRST
• agent/epss
• collector/mitre-cve
• source/MITRE
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/severity
• agent/softwarecombine
• agent/tags
• vendor/dlink
• canonical/dlink dns-120 firmware
• canonical/dlink dns-120
• canonical/dlink dnr-202l firmware
• canonical/dlink dnr-202l
• canonical/dlink dns-315l firmware
• canonical/dlink dns-315l
• canonical/dlink dns-320 firmware
• canonical/dlink dns-320
• canonical/dlink dns-320l firmware
• canonical/dlink dns-320l
• canonical/dlink dns-320lw firmware
• canonical/dlink dns-320lw
• canonical/dlink dns-321 firmware
• canonical/dlink dns-321
• canonical/dlink dnr-322l firmware
• canonical/dlink dnr-322l
• canonical/dlink dns-323 firmware
• canonical/dlink dns-323
• canonical/dlink dns-325 firmware
• canonical/dlink dns-325
• canonical/dlink dns-326 firmware
• canonical/dlink dns-326
• canonical/dlink dns-327l firmware
• canonical/dlink dns-327l
• canonical/dlink dnr-326 firmware
• canonical/dlink dnr-326
• canonical/dlink dns-340l firmware
• canonical/dlink dns-340l
• canonical/dlink dns-343 firmware
• canonical/dlink dns-343
• canonical/dlink dns-345 firmware
• canonical/dlink dns-345
• canonical/dlink dns-726-4 firmware
• canonical/dlink dns-726-4
• canonical/dlink dns-1100-4 firmware
• canonical/dlink dns-1100-4
• canonical/dlink dns-1200-05 firmware
• canonical/dlink dns-1200-05
• canonical/dlink dns-1550-04 firmware
• canonical/dlink dns-1550-04