Search
Find a vulnerability
Search criteria
14 vulnerabilities found for dcme-720_firmware by dcnetworks
CVE-2025-9387 (GCVE-0-2025-9387)
Vulnerability from nvd – Published: 2025-08-24 12:02 – Updated: 2025-08-25 18:33
VLAI
Title
DCN DCME-720 Web Management Backend ip_block.php os command injection
Summary
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.321220 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.321220 | signaturepermissions-required |
| https://vuldb.com/?submit.630727 | third-party-advisory |
| https://github.com/lin-3-start/lin-cve/blob/main/… | related |
| https://github.com/lin-3-start/lin-cve/blob/main/… | exploit |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9387",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-25T18:33:50.435460Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-25T18:33:54.771Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md#%E9%AA%8C%E8%AF%81"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Web Management Backend"
],
"product": "DCME-720",
"vendor": "DCN",
"versions": [
{
"status": "affected",
"version": "9.1.5.11"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "QMSSDXN (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "Eine Schwachstelle wurde in DCN DCME-720 9.1.5.11 gefunden. Es geht um eine nicht n\u00e4her bekannte Funktion der Datei /usr/local/www/function/audit/newstatistics/ip_block.php der Komponente Web Management Backend. Durch Manipulation des Arguments ip mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T12:02:06.813Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-321220 | DCN DCME-720 Web Management Backend ip_block.php os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.321220"
},
{
"name": "VDB-321220 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.321220"
},
{
"name": "Submit #630727 | DCN DCME-720 9.1.5.11 Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.630727"
},
{
"tags": [
"related"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md#%E9%AA%8C%E8%AF%81"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-08-23T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-08-23T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-08-23T17:21:03.000Z",
"value": "VulDB entry last update"
}
],
"title": "DCN DCME-720 Web Management Backend ip_block.php os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-9387",
"datePublished": "2025-08-24T12:02:06.813Z",
"dateReserved": "2025-08-23T15:15:59.529Z",
"dateUpdated": "2025-08-25T18:33:54.771Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52782 (GCVE-0-2024-52782)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52782",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:14.399416Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.880Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:06:36.838Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52782",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.880Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52781 (GCVE-0-2024-52781)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52781",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:01.385320Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.771Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:05:49.318Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52781",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.771Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52780 (GCVE-0-2024-52780)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52780",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:08.879739Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:04:57.695Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52780",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.658Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52779 (GCVE-0-2024-52779)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52779",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:55.618140Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.534Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:03:01.050Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52779",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52778 (GCVE-0-2024-52778)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52778",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:51.252972Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.378Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:02:00.796Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52778",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.378Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52777 (GCVE-0-2024-52777)
Vulnerability from nvd – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:09
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52777",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:46.097027Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:09:59.957Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L, \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:00:54.415Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52777",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:09:59.957Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-9387 (GCVE-0-2025-9387)
Vulnerability from cvelistv5 – Published: 2025-08-24 12:02 – Updated: 2025-08-25 18:33
VLAI
Title
DCN DCME-720 Web Management Backend ip_block.php os command injection
Summary
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.321220 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.321220 | signaturepermissions-required |
| https://vuldb.com/?submit.630727 | third-party-advisory |
| https://github.com/lin-3-start/lin-cve/blob/main/… | related |
| https://github.com/lin-3-start/lin-cve/blob/main/… | exploit |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9387",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-25T18:33:50.435460Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-25T18:33:54.771Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md#%E9%AA%8C%E8%AF%81"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Web Management Backend"
],
"product": "DCME-720",
"vendor": "DCN",
"versions": [
{
"status": "affected",
"version": "9.1.5.11"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "QMSSDXN (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Other products might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "Eine Schwachstelle wurde in DCN DCME-720 9.1.5.11 gefunden. Es geht um eine nicht n\u00e4her bekannte Funktion der Datei /usr/local/www/function/audit/newstatistics/ip_block.php der Komponente Web Management Backend. Durch Manipulation des Arguments ip mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T12:02:06.813Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-321220 | DCN DCME-720 Web Management Backend ip_block.php os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.321220"
},
{
"name": "VDB-321220 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.321220"
},
{
"name": "Submit #630727 | DCN DCME-720 9.1.5.11 Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.630727"
},
{
"tags": [
"related"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/lin-3-start/lin-cve/blob/main/DCME-720/DCME-720.md#%E9%AA%8C%E8%AF%81"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-08-23T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-08-23T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-08-23T17:21:03.000Z",
"value": "VulDB entry last update"
}
],
"title": "DCN DCME-720 Web Management Backend ip_block.php os command injection"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-9387",
"datePublished": "2025-08-24T12:02:06.813Z",
"dateReserved": "2025-08-23T15:15:59.529Z",
"dateUpdated": "2025-08-25T18:33:54.771Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52778 (GCVE-0-2024-52778)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52778",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:51.252972Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.378Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:02:00.796Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52778",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.378Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52777 (GCVE-0-2024-52777)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:09
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52777",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:46.097027Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:09:59.957Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L, \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:00:54.415Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52777",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:09:59.957Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52782 (GCVE-0-2024-52782)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52782",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:14.399416Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.880Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:06:36.838Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52782",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.880Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52780 (GCVE-0-2024-52780)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52780",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:08.879739Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.658Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/mgmt_edit.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:04:57.695Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52780",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.658Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52781 (GCVE-0-2024-52781)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52781",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:03:01.385320Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.771Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:05:49.318Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52781",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.771Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-52779 (GCVE-0-2024-52779)
Vulnerability from cvelistv5 – Published: 2024-11-29 00:00 – Updated: 2024-11-29 18:10
VLAI
Summary
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| dcnglobal | dcme-320_firmware |
Affected:
0 , ≤ 7.4.12.90
(custom)
cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-520_firmware |
Affected:
0 , ≤ 9.25.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-320-l_firmware |
Affected:
0 , ≤ 9.3.5.26
(custom)
cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:* |
|
| dcnglobal | dcme-720_firmware |
Affected:
0 , ≤ 9.1.5.11
(custom)
cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "7.4.12.90",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-520_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.25.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-320-l_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.3.5.26",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "dcme-720_firmware",
"vendor": "dcnglobal",
"versions": [
{
"lessThanOrEqual": "9.1.5.11",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-52779",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-29T18:02:55.618140Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T18:10:00.534Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "DCME-320 \u003c=7.4.12.90, DCME-520 \u003c=9.25.5.11, DCME-320-L \u003c=9.3.5.26, and DCME-720 \u003c=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-29T16:03:01.050Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-52779",
"datePublished": "2024-11-29T00:00:00.000Z",
"dateReserved": "2024-11-15T00:00:00.000Z",
"dateUpdated": "2024-11-29T18:10:00.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}