CVE-2024-7849 - Vulnerability Details

Vendors	Products
Dlink	Dnr-202l Firmware Dnr-322l Firmware Dnr-326 Firmware Dns-1100-4 Firmware Dns-1200-05 Firmware Dns-120 Firmware Dns-1550-04 Firmware Dns-315l Firmware Dns-320 Firmware Dns-320l Firmware Dns-320lw Firmware Dns-321 Firmware Dns-323 Firmware Dns-325 Firmware Dns-326 Firmware Dns-327l Firmware Dns-340l Firmware Dns-343 Firmware Dns-345 Firmware Dns-726-4 Firmware

Link	Providers
https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_cgi_create_album.md
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383
https://vuldb.com/?ctiid.274755
https://vuldb.com/?id.274755
https://vuldb.com/?submit.390113

Type	Values Removed	Values Added
First Time appeared		Dlink Dlink dnr-202l Firmware Dlink dnr-322l Firmware Dlink dnr-326 Firmware Dlink dns-1100-4 Firmware Dlink dns-1200-05 Firmware Dlink dns-120 Firmware Dlink dns-1550-04 Firmware Dlink dns-315l Firmware Dlink dns-320 Firmware Dlink dns-320l Firmware Dlink dns-320lw Firmware Dlink dns-321 Firmware Dlink dns-323 Firmware Dlink dns-325 Firmware Dlink dns-326 Firmware Dlink dns-327l Firmware Dlink dns-340l Firmware Dlink dns-343 Firmware Dlink dns-345 Firmware Dlink dns-726-4 Firmware
CPEs		cpe:2.3:o:dlink:dnr-202l_firmware:::::::: cpe:2.3:o:dlink:dnr-322l_firmware:::::::: cpe:2.3:o:dlink:dnr-326_firmware:::::::: cpe:2.3:o:dlink:dns-1100-4_firmware:::::::: cpe:2.3:o:dlink:dns-1200-05_firmware:::::::: cpe:2.3:o:dlink:dns-120_firmware:::::::: cpe:2.3:o:dlink:dns-1550-04_firmware:::::::: cpe:2.3:o:dlink:dns-315l_firmware:::::::: cpe:2.3:o:dlink:dns-320_firmware:::::::: cpe:2.3:o:dlink:dns-320l_firmware:::::::: cpe:2.3:o:dlink:dns-320lw_firmware:::::::: cpe:2.3:o:dlink:dns-321_firmware:::::::: cpe:2.3:o:dlink:dns-323_firmware:::::::: cpe:2.3:o:dlink:dns-325_firmware:::::::: cpe:2.3:o:dlink:dns-326_firmware:::::::: cpe:2.3:o:dlink:dns-327l_firmware:::::::: cpe:2.3:o:dlink:dns-340l_firmware:::::::: cpe:2.3:o:dlink:dns-343_firmware:::::::: cpe:2.3:o:dlink:dns-345_firmware:::::::: cpe:2.3:o:dlink:dns-726-4_firmware::::::::
Vendors & Products		Dlink Dlink dnr-202l Firmware Dlink dnr-322l Firmware Dlink dnr-326 Firmware Dlink dns-1100-4 Firmware Dlink dns-1200-05 Firmware Dlink dns-120 Firmware Dlink dns-1550-04 Firmware Dlink dns-315l Firmware Dlink dns-320 Firmware Dlink dns-320l Firmware Dlink dns-320lw Firmware Dlink dns-321 Firmware Dlink dns-323 Firmware Dlink dns-325 Firmware Dlink dns-326 Firmware Dlink dns-327l Firmware Dlink dns-340l Firmware Dlink dns-343 Firmware Dlink dns-345 Firmware Dlink dns-726-4 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This affects the function cgi_create_album of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument current_path leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Title		D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow
Weaknesses		CWE-120
References		https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_cgi_create_album.md https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383 https://vuldb.com/?ctiid.274755 https://vuldb.com/?id.274755 https://vuldb.com/?submit.390113
Metrics		cvssV2_0 `{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C'}` cvssV3_0 `{'score': 8.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7849", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2024-08-15T16:01:33.030Z", "datePublished": "2024-08-15T23:31:06.300Z", "dateUpdated": "2024-08-16T17:21:43.257Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2024-08-15T23:31:06.300Z"}, "title": "D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "CWE-120 Buffer Overflow"}]}], "affected": [{"vendor": "D-Link", "product": "DNS-120", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNR-202L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-315L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-320", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-320L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-320LW", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-321", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNR-322L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-323", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-325", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-326", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-327L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNR-326", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-340L", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-343", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-345", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-726-4", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-1100-4", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-1200-05", "versions": [{"version": "20240814", "status": "affected"}]}, {"vendor": "D-Link", "product": "DNS-1550-04", "versions": [{"version": "20240814", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This affects the function cgi_create_album of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument current_path leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced."}, {"lang": "de", "value": "Es wurde eine kritische Schwachstelle in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 bis 20240814 gefunden. Es betrifft die Funktion cgi_create_album der Datei /cgi-bin/photocenter_mgr.cgi. Durch Manipulieren des Arguments current_path mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseSeverity": "HIGH"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 9, "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C"}}], "timeline": [{"time": "2024-08-15T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2024-08-15T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2024-08-15T18:06:43.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "BuaaI0TTeam (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.274755", "name": "VDB-274755 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.274755", "name": "VDB-274755 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.390113", "name": "Submit #390113 | D-Link DNS 320/320L/321/323/325/327L Buffer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_cgi_create_album.md", "tags": ["exploit"]}, {"url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "tags": ["related"]}], "tags": ["unsupported-when-assigned"]}, "adp": [{"affected": [{"vendor": "dlink", "product": "dns-726-4_firmware", "cpes": ["cpe:2.3:o:dlink:dnr-202l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dnr-322l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dnr-326_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1100-4_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1200-05_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-120_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1550-04_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-315l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-321_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-323_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-326_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-343_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-345_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-726-4_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "20240814", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-16T17:21:28.611771Z", "id": "CVE-2024-7849", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T17:21:43.257Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-7849 (string)

assignerOrgId : 1af790b2-7ee1-4545-860a-a788eba489b5 (string)

state : PUBLISHED (string)

assignerShortName : VulDB (string)

dateReserved : 2024-08-15T16:01:33.030Z (string)

datePublished : 2024-08-15T23:31:06.300Z (string)

dateUpdated : 2024-08-16T17:21:43.257Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 1af790b2-7ee1-4545-860a-a788eba489b5 (string)

shortName : VulDB (string)

dateUpdated : 2024-08-15T23:31:06.300Z (string)

}

title : D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-120 (string)

lang : en (string)

description : CWE-120 Buffer Overflow (string)

}

]

}

]

affected : [ »

0 : { »

vendor : D-Link (string)

product : DNS-120 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

1 : { »

vendor : D-Link (string)

product : DNR-202L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

2 : { »

vendor : D-Link (string)

product : DNS-315L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

3 : { »

vendor : D-Link (string)

product : DNS-320 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

4 : { »

vendor : D-Link (string)

product : DNS-320L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

5 : { »

vendor : D-Link (string)

product : DNS-320LW (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

6 : { »

vendor : D-Link (string)

product : DNS-321 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

7 : { »

vendor : D-Link (string)

product : DNR-322L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

8 : { »

vendor : D-Link (string)

product : DNS-323 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

9 : { »

vendor : D-Link (string)

product : DNS-325 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

10 : { »

vendor : D-Link (string)

product : DNS-326 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

11 : { »

vendor : D-Link (string)

product : DNS-327L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

12 : { »

vendor : D-Link (string)

product : DNR-326 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

13 : { »

vendor : D-Link (string)

product : DNS-340L (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

14 : { »

vendor : D-Link (string)

product : DNS-343 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

15 : { »

vendor : D-Link (string)

product : DNS-345 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

16 : { »

vendor : D-Link (string)

product : DNS-726-4 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

17 : { »

vendor : D-Link (string)

product : DNS-1100-4 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

18 : { »

vendor : D-Link (string)

product : DNS-1200-05 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

19 : { »

vendor : D-Link (string)

product : DNS-1550-04 (string)

versions : [ »

0 : { »

version : 20240814 (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This affects the function cgi_create_album of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument current_path leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced. (string)

}

1 : { »

lang : de (string)

value : Es wurde eine kritische Schwachstelle in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 bis 20240814 gefunden. Es betrifft die Funktion cgi_create_album der Datei /cgi-bin/photocenter_mgr.cgi. Durch Manipulieren des Arguments current_path mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. (string)

}

]

metrics : [ »

0 : { »

cvssV4_0 : { »

version : 4.0 (string)

baseScore : 8.7 (number)

vectorString : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (string)

baseSeverity : HIGH (string)

}

1 : { »

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 8.8 (number)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

baseSeverity : HIGH (string)

}

2 : { »

cvssV3_0 : { »

version : 3.0 (string)

baseScore : 8.8 (number)

vectorString : CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

baseSeverity : HIGH (string)

}

3 : { »

cvssV2_0 : { »

version : 2.0 (string)

baseScore : 9 (number)

vectorString : AV:N/AC:L/Au:S/C:C/I:C/A:C (string)

}

]

timeline : [ »

0 : { »

time : 2024-08-15T00:00:00.000Z (string)

lang : en (string)

value : Advisory disclosed (string)

}

1 : { »

time : 2024-08-15T02:00:00.000Z (string)

lang : en (string)

value : VulDB entry created (string)

}

2 : { »

time : 2024-08-15T18:06:43.000Z (string)

lang : en (string)

value : VulDB entry last update (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : BuaaI0TTeam (VulDB User) (string)

type : reporter (string)

}

]

references : [ »

0 : { »

url : https://vuldb.com/?id.274755 (string)

name : VDB-274755 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow (string)

tags : [ »

0 : vdb-entry (string)

1 : technical-description (string)

]

}

1 : { »

url : https://vuldb.com/?ctiid.274755 (string)

name : VDB-274755 | CTI Indicators (IOB, IOC, IOA) (string)

tags : [ »

0 : signature (string)

1 : permissions-required (string)

]

}

2 : { »

url : https://vuldb.com/?submit.390113 (string)

name : Submit #390113 | D-Link DNS 320/320L/321/323/325/327L Buffer Overflow (string)

tags : [ »

0 : third-party-advisory (string)

]

}

3 : { »

url : https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_cgi_create_album.md (string)

tags : [ »

0 : exploit (string)

]

}

4 : { »

url : https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383 (string)

tags : [ »

0 : related (string)

]

}

]

tags : [ »

0 : unsupported-when-assigned (string)

]

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : dlink (string)

product : dns-726-4_firmware (string)

cpes : [ »

0 : cpe:2.3:o:dlink:dnr-202l_firmware:*:*:*:*:*:*:*:* (string)

1 : cpe:2.3:o:dlink:dnr-322l_firmware:*:*:*:*:*:*:*:* (string)

2 : cpe:2.3:o:dlink:dnr-326_firmware:*:*:*:*:*:*:*:* (string)

3 : cpe:2.3:o:dlink:dns-1100-4_firmware:*:*:*:*:*:*:*:* (string)

4 : cpe:2.3:o:dlink:dns-1200-05_firmware:*:*:*:*:*:*:*:* (string)

5 : cpe:2.3:o:dlink:dns-120_firmware:*:*:*:*:*:*:*:* (string)

6 : cpe:2.3:o:dlink:dns-1550-04_firmware:*:*:*:*:*:*:*:* (string)

7 : cpe:2.3:o:dlink:dns-315l_firmware:*:*:*:*:*:*:*:* (string)

8 : cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:* (string)

9 : cpe:2.3:o:dlink:dns-320l_firmware:*:*:*:*:*:*:*:* (string)

10 : cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:* (string)

11 : cpe:2.3:o:dlink:dns-321_firmware:*:*:*:*:*:*:*:* (string)

12 : cpe:2.3:o:dlink:dns-323_firmware:*:*:*:*:*:*:*:* (string)

13 : cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:* (string)

14 : cpe:2.3:o:dlink:dns-326_firmware:*:*:*:*:*:*:*:* (string)

15 : cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:* (string)

16 : cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:* (string)

17 : cpe:2.3:o:dlink:dns-343_firmware:*:*:*:*:*:*:*:* (string)

18 : cpe:2.3:o:dlink:dns-345_firmware:*:*:*:*:*:*:*:* (string)

19 : cpe:2.3:o:dlink:dns-726-4_firmware:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 20240814 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-16T17:21:28.611771Z (string)

id : CVE-2024-7849 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-16T17:21:43.257Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7849", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-16T17:21:28.611771Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:dlink:dnr-202l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dnr-322l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dnr-326_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1100-4_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1200-05_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-120_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-1550-04_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-315l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-321_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-323_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-326_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-343_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-345_firmware:*:*:*:*:*:*:*:*", "cpe:2.3:o:dlink:dns-726-4_firmware:*:*:*:*:*:*:*:*"], "vendor": "dlink", "product": "dns-726-4_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "20240814"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T16:16:44.330Z"}}], "cna": {"tags": ["unsupported-when-assigned"], "title": "D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow", "credits": [{"lang": "en", "type": "reporter", "value": "BuaaI0TTeam (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 9, "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C"}}], "affected": [{"vendor": "D-Link", "product": "DNS-120", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNR-202L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-315L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-320", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-320L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-320LW", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-321", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNR-322L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-323", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-325", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-326", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-327L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNR-326", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-340L", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-343", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-345", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-726-4", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-1100-4", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-1200-05", "versions": [{"status": "affected", "version": "20240814"}]}, {"vendor": "D-Link", "product": "DNS-1550-04", "versions": [{"status": "affected", "version": "20240814"}]}], "timeline": [{"lang": "en", "time": "2024-08-15T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2024-08-15T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2024-08-15T18:06:43.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.274755", "name": "VDB-274755 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.274755", "name": "VDB-274755 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.390113", "name": "Submit #390113 | D-Link DNS 320/320L/321/323/325/327L Buffer Overflow", "tags": ["third-party-advisory"]}, {"url": "https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_cgi_create_album.md", "tags": ["exploit"]}, {"url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "tags": ["related"]}], "descriptions": [{"lang": "en", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This affects the function cgi_create_album of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument current_path leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced."}, {"lang": "de", "value": "Es wurde eine kritische Schwachstelle in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 bis 20240814 gefunden. Es betrifft die Funktion cgi_create_album der Datei /cgi-bin/photocenter_mgr.cgi. Durch Manipulieren des Arguments current_path mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Overflow"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2024-08-15T23:31:06.300Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7849", "state": "PUBLISHED", "dateUpdated": "2024-08-16T17:21:43.257Z", "dateReserved": "2024-08-15T16:01:33.030Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2024-08-15T23:31:06.300Z", "assignerShortName": "VulDB"}, "dataVersion": "5.1"}