D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection

Summary

A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This vulnerability affects the function cgi_unzip of the file /cgi-bin/webfile_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument path leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

Timeline

1. Aug 24, 2024, 9:31 AM UTCCVE published
2. Aug 26, 2024, 2:03 PM UTCCISA SSVC assessment

   Exploitation: poc · Automatable: no · Technical impact: partial

3. Aug 26, 2024, 4:05 PM UTCRecord last updated

Affected versions

• D-Link DNS-120

  20240814

• D-Link DNR-202L

  20240814

• D-Link DNS-315L

  20240814

• D-Link DNS-320

  20240814

• D-Link DNS-320L

  20240814

• D-Link DNS-320LW

  20240814

• D-Link DNS-321

  20240814

• D-Link DNR-322L

  20240814

• D-Link DNS-323

  20240814

• D-Link DNS-325

  20240814

• D-Link DNS-326

  20240814

• D-Link DNS-327L

  20240814

• D-Link DNR-326

  20240814

• D-Link DNS-340L

  20240814

• D-Link DNS-343

  20240814

• D-Link DNS-345

  20240814

• D-Link DNS-726-4

  20240814

• D-Link DNS-1100-4

  20240814

• D-Link DNS-1200-05

  20240814

• D-Link DNS-1550-04

  20240814

References 6