CVE-2024-8214: D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection

First published: Tue Aug 27 2024(Updated: )

A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. Affected by this vulnerability is the function cgi_FMT_Std2R5_2nd_DiskMGR of the file /cgi-bin/hd_config.cgi. The manipulation of the argument f_source_dev leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

Credit: cna@vuldb.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/references
• agent/title
• agent/type
• agent/first-publish-date
• agent/description
• agent/author
• agent/event
• collector/epss-latest
• source/FIRST
• agent/epss
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/severity
• agent/weakness
• agent/softwarecombine
• agent/tags
• vendor/dlink
• canonical/dlink dns-315l firmware
• canonical/dlink dns-315l
• canonical/dlink dns-320lw firmware
• canonical/dlink dns-320lw
• canonical/dlink dns-1550-04 firmware
• canonical/dlink dns-1550-04
• canonical/dlink dns-1200-05 firmware
• canonical/dlink dns-1200-05
• canonical/dlink dns-1100-4 firmware
• canonical/dlink dns-1100-4
• canonical/dlink dns-726-4 firmware
• canonical/dlink dns-726-4
• canonical/dlink dns-345 firmware
• canonical/dlink dns-345
• canonical/dlink dns-343 firmware
• canonical/dlink dns-343
• canonical/dlink dns-340l firmware
• canonical/dlink dns-340l
• canonical/dlink dnr-326 firmware
• canonical/dlink dnr-326
• canonical/dlink dns-327l firmware
• canonical/dlink dns-327l
• canonical/dlink dns-326 firmware
• canonical/dlink dns-326
• canonical/dlink dns-325 firmware
• canonical/dlink dns-325
• canonical/dlink dns-323 firmware
• canonical/dlink dns-323
• canonical/dlink dnr-322l firmware
• canonical/dlink dnr-322l
• canonical/dlink dns-321 firmware
• canonical/dlink dns-321
• canonical/dlink dns-320l firmware
• canonical/dlink dns-320l
• canonical/dlink dns-320 firmware
• canonical/dlink dns-320
• canonical/dlink dnr-202l firmware
• canonical/dlink dnr-202l
• canonical/dlink dns-120 firmware
• canonical/dlink dns-120