Record status Published
Identifier year (not publication year) 2024
Source publication Aug 13, 2024
Source updated Aug 15, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240812. It has been classified as critical. This affects the function sprintf of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument filter leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DNS-120
Vendor D-Link
Product DNS-120
Platforms Unknown
Default status Unknown
DNS-120 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNR-202L
Vendor D-Link
Product DNR-202L
Platforms Unknown
Default status Unknown
DNR-202L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-315L
Vendor D-Link
Product DNS-315L
Platforms Unknown
Default status Unknown
DNS-315L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-320
Vendor D-Link
Product DNS-320
Platforms Unknown
Default status Unknown
DNS-320 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-320L
Vendor D-Link
Product DNS-320L
Platforms Unknown
Default status Unknown
DNS-320L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-320LW
Vendor D-Link
Product DNS-320LW
Platforms Unknown
Default status Unknown
DNS-320LW · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-321
Vendor D-Link
Product DNS-321
Platforms Unknown
Default status Unknown
DNS-321 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNR-322L
Vendor D-Link
Product DNR-322L
Platforms Unknown
Default status Unknown
DNR-322L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-323
Vendor D-Link
Product DNS-323
Platforms Unknown
Default status Unknown
DNS-323 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-325
Vendor D-Link
Product DNS-325
Platforms Unknown
Default status Unknown
DNS-325 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-326
Vendor D-Link
Product DNS-326
Platforms Unknown
Default status Unknown
DNS-326 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-327L
Vendor D-Link
Product DNS-327L
Platforms Unknown
Default status Unknown
DNS-327L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNR-326
Vendor D-Link
Product DNR-326
Platforms Unknown
Default status Unknown
DNR-326 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-340L
Vendor D-Link
Product DNS-340L
Platforms Unknown
Default status Unknown
DNS-340L · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-343
Vendor D-Link
Product DNS-343
Platforms Unknown
Default status Unknown
DNS-343 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-345
Vendor D-Link
Product DNS-345
Platforms Unknown
Default status Unknown
DNS-345 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-726-4
Vendor D-Link
Product DNS-726-4
Platforms Unknown
Default status Unknown
DNS-726-4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-1100-4
Vendor D-Link
Product DNS-1100-4
Platforms Unknown
Default status Unknown
DNS-1100-4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-1200-05
Vendor D-Link
Product DNS-1200-05
Platforms Unknown
Default status Unknown
DNS-1200-05 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed
DNS-1550-04
Vendor D-Link
Product DNS-1550-04
Platforms Unknown
Default status Unknown
DNS-1550-04 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
20240812 affectedUnavailable Unavailable Unavailable None listed