CVE-2024-7829

NVD Published Date: August 15, 2024 at 01:15 PM
NVD Last Modified: August 19, 2024 at 06:34 PM
Download Patch
Vulnerability ID
CVE-2024-7829
Severity
CRITICAL
Severity Score
9.8
Summary
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This issue affects the function cgi_del_photo of the file /cgi-bin/photocenter_mgr.cgi. The manipulation of the argument current_path leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Mitigation and Patches
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-120

Recent Publish

CVE-2024-7828

CVE-2024-7830

2024-08 Cumulative Update for Windows 11 Version 23H2 for arm64-based Systems (KB5041585)

2024-08 Cumulative Update for Windows 11 Version 22H2 for arm64-based Systems (KB5041585)

2024-08 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5041585)

2024-08 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5041585)

See SecOps Solution
in action

Schedule Demo