cveboard RSS feed

CVE-2024-10915

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument group leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

DNS-320

Vendor
D-Link
Product
DNS-320
Platforms
Unknown
Default status
Unknown
DNS-320 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20241028affectedUnavailableUnavailableUnavailableNone listed

DNS-320LW

Vendor
D-Link
Product
DNS-320LW
Platforms
Unknown
Default status
Unknown
DNS-320LW · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20241028affectedUnavailableUnavailableUnavailableNone listed

DNS-325

Vendor
D-Link
Product
DNS-325
Platforms
Unknown
Default status
Unknown
DNS-325 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20241028affectedUnavailableUnavailableUnavailableNone listed

DNS-340L

Vendor
D-Link
Product
DNS-340L
Platforms
Unknown
Default status
Unknown
DNS-340L · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20241028affectedUnavailableUnavailableUnavailableNone listed