CVE-2024-8132 (GCVE-0-2024-8132)

Vulnerability from cvelistv5 – Published: 2024-08-24 18:00 – Updated: 2024-08-26 15:54 Unsupported When Assigned
VLAI
Title
D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection
Summary
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been classified as critical. This affects the function webdav_mgr of the file /cgi-bin/webdav_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument f_path leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Severity
5.3 (Medium)
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
6.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
6.3 (Medium)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
SSVC
Exploitation: poc Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-08-26 14:03 UTC
CWE
Assigner
VulDB CNA under the mitre root
CNA scorecard B 82/100 over 3782 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
D-Link DNS-120 Affected: 20240814
guessed Create a notification for this product.
D-Link DNR-202L Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-315L Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-320 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-320L Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-320LW Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-321 Affected: 20240814
guessed Create a notification for this product.
D-Link DNR-322L Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-323 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-325 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-326 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-327L Affected: 20240814
guessed Create a notification for this product.
D-Link DNR-326 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-340L Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-343 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-345 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-726-4 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-1100-4 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-1200-05 Affected: 20240814
guessed Create a notification for this product.
D-Link DNS-1550-04 Affected: 20240814
guessed Create a notification for this product.
dlink dns-120_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-120_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dnr-202l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dnr-202l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-315l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-315l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-320_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-320_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-320l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-320l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-320lw_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-320lw_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-321_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-321_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dnr-322l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dnr-322l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-323_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-323_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-325_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-325_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-326_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-326_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-327l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-327l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dnr-326_firmware Affected: 20240814
    cpe:2.3:o:dlink:dnr-326_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-340l_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-340l_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-343_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-343_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-345_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-345_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-726-4_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-726-4_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-1100-4_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-1100-4_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-1200-05_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-1200-05_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
dlink dns-1550-04_firmware Affected: 20240814
    cpe:2.3:o:dlink:dns-1550-04_firmware:20240814:*:*:*:*:*:*:*
Create a notification for this product.
Credits
Buaa1otTeam (VulDB User)
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-120_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-120_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dnr-202l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dnr-202l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-315l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-315l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-320_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-320_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-320l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-320l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-320lw_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-320lw_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-321_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-321_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dnr-322l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dnr-322l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-323_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-323_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-325_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-325_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-326_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-326_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-327l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-327l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dnr-326_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dnr-326_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-340l_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-340l_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-343_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-343_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-345_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-345_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-726-4_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-726-4_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-1100-4_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-1100-4_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-1200-05_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-1200-05_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:dlink:dns-1550-04_firmware:20240814:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dns-1550-04_firmware",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "20240814"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-8132",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-26T14:03:22.896885Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-26T15:54:41.469Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-120",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNR-202L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-315L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-320",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-320L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-320LW",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-321",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNR-322L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-323",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-325",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-326",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-327L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNR-326",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-340L",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-343",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-345",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-726-4",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-1100-4",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-1200-05",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        },
        {
          "modules": [
            "HTTP POST Request Handler"
          ],
          "product": "DNS-1550-04",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "20240814"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Buaa1otTeam (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been classified as critical. This affects the function webdav_mgr of the file /cgi-bin/webdav_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument f_path leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced."
        },
        {
          "lang": "de",
          "value": "Es wurde eine Schwachstelle in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 bis 20240814 ausgemacht. Sie wurde als kritisch eingestuft. Dabei betrifft es die Funktion webdav_mgr der Datei /cgi-bin/webdav_mgr.cgi der Komponente HTTP POST Request Handler. Durch Beeinflussen des Arguments f_path mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 6.5,
            "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Command Injection",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-24T18:00:05.836Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-275703 | D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.275703"
        },
        {
          "name": "VDB-275703 | CTI Indicators (IOB, IOC, TTP, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.275703"
        },
        {
          "name": "Submit #396293 | D-Link DNS 320/320L/321/323/325/327L Command Injection",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.396293"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_webdav_mgr.md"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.dlink.com/"
        }
      ],
      "tags": [
        "unsupported-when-assigned"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-08-23T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2024-08-23T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2024-08-23T20:35:17.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2024-8132",
    "datePublished": "2024-08-24T18:00:05.836Z",
    "dateReserved": "2024-08-23T18:30:00.444Z",
    "dateUpdated": "2024-08-26T15:54:41.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-8132",
      "date": "2026-10-12",
      "epss": "0.23426",
      "percentile": "0.97749"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-120",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNR-202L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-315L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-320",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-320L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-320LW",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-321",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNR-322L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-323",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-325",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-326",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-327L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNR-326",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-340L",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-343",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-345",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-726-4",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-1100-4",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-1200-05",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "modules": [
                  "HTTP POST Request Handler"
                ],
                "product": "DNS-1550-04",
                "vendor": "D-Link",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              }
            ],
            "source": "cna@vuldb.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-120_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-120_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-202l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-202l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-315l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-315l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320lw_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320lw_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-321_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-321_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-322l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-322l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-323_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-323_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-325_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-325_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-326_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-326_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-327l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-327l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-326_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-326_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-340l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-340l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-343_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-343_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-345_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-345_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-726-4_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-726-4_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1100-4_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1100-4_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1200-05_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1200-05_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1550-04_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1550-04_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B2C1EF70-AD9B-48D7-8DF6-A6416C517F12",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-1550-04:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E691E775-382C-4BA9-AA44-FBC3148D3E54",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42DA6DEB-3578-44A5-916F-1628141F0DDE",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-1200-05:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D042C75D-6731-46B2-B11E-A009B9029B3F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7CAFE1E3-B705-4CF1-AEB9-A474432B6D34",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-1100-4:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5D08ED7-3E7F-4D30-890E-6535F6C34682",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A74D270-9076-474D-A06F-C915FCEA2164",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-726-4:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "75E5010F-21BA-4B6B-B00C-2688268FD67B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "12C5E2D7-018E-4ED1-92C7-B5B1D8CC6990",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C7E56821-7EA0-4CA1-BA17-7FD4ED9F794C",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DD656642-EDD4-4EB2-81AB-04207BC14196",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-343:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F968791D-D3BD-442C-818E-4E878B12776D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "39FF9666-8493-4A36-A199-1190AD8FAF3D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-340l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0646B20C-5642-4CEA-A96C-7E82AD94A281",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "816E5F34-CE76-49E5-91F3-8CC84C561558",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "33CB308B-CF82-4E40-B2DC-23EBD48CD130",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "172D5EFF-E0DF-4A99-8499-71450A46A86C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB305B29-7F89-4A52-9ECF-3DB0BDD2350D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B5E6F048-D865-4378-87C7-B0E528134276",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-326:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D26F4F77-A6E3-4D7D-A781-BEB5FF7BC44F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "16954393-3449-438A-978C-265EE3A35FF8",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8042169D-D9FA-4BD6-90D1-E0DE269E42B9",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "641CB5F1-3DE0-480B-95A4-FC42A8FF3C97",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-323:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94ED678A-AB4C-4637-B0D8-C232A0BB5D5F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AD3AD5EE-8E1E-4336-A1AB-AB028CC71286",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dnr-322l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5DAF62A4-2429-4B89-8FAD-8B23EF15E050",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DC28053F-88A9-4CA1-A2A2-CC90FEEA68FC",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-321:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A278BC9-6197-43D9-93C2-3DF760856FB7",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8FE78C5B-2A98-47EE-BF67-CF58AFE50A37",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-320lw:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45467ABC-BAA9-4EB0-9F97-92E31854CA8B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4599D769-0210-4D49-9896-9AD1376A037E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C677E53-6885-4EC4-A7CC-E24E8F445F59",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4452F9A4-3A0A-4773-9818-04C94CF9F8E7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-320:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A0F5355E-F68D-49FE-9793-1FD9BD9AF3E1",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A8CFCD7B-EFFB-4FAB-9537-46AC7B567126",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-315l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "03C5CED7-55A7-4026-95CD-A2ADB5853823",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "96195649-172A-4C21-AA15-7B05F86C5CEC",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dnr-202l:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "07A92F2C-16FD-4A53-8066-83FEC2818DF5",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C44BE2C6-BF3E-43C3-B32F-2DCE756F94BC",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dlink:dns-120:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6E161E54-2FE9-4359-9B2D-8700D00DE8E7",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [
          {
            "sourceIdentifier": "cna@vuldb.com",
            "tags": [
              "unsupported-when-assigned"
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been classified as critical. This affects the function webdav_mgr of the file /cgi-bin/webdav_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument f_path leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced."
          },
          {
            "lang": "es",
            "value": "Se encontr\u00f3 una vulnerabilidad en D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS- 326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 y DNS-1550-04 hasta 20240814. Ha sido clasificada como cr\u00edtica. Esto afecta a la funci\u00f3n webdav_mgr del archivo /cgi-bin/webdav_mgr.cgi del componente HTTP POST Request Handler. La manipulaci\u00f3n del argumento f_path conduce a la inyecci\u00f3n de comandos. Es posible iniciar el ataque de forma remota. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante. NOTA: Se contact\u00f3 primeramente con el proveedor y se confirm\u00f3 que el producto ha llegado al final de su vida \u00fatil. Deber\u00eda retirarse y reemplazarse."
          }
        ],
        "id": "CVE-2024-8132",
        "lastModified": "2026-06-17T08:21:57.440",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "cna@vuldb.com",
              "type": "Secondary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.4,
              "source": "cna@vuldb.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cna@vuldb.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-8132",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-26T14:03:22.896885Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-08-24T18:15:04.727",
        "references": [
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_webdav_mgr.md"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Permissions Required",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?ctiid.275703"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?id.275703"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://vuldb.com/?submit.396293"
          },
          {
            "source": "cna@vuldb.com",
            "tags": [
              "Product"
            ],
            "url": "https://www.dlink.com/"
          }
        ],
        "sourceIdentifier": "cna@vuldb.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-77"
              }
            ],
            "source": "cna@vuldb.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-78"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T22:02:13+00:00",
      "cve": "CVE-2024-8132",
      "id": "CVE-2024-8132",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-8132.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-120_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-120_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-202l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-202l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-315l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-315l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-320lw_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-320lw_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-321_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-321_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-322l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-322l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-323_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-323_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-325_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-325_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-326_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-326_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-327l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-327l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dnr-326_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dnr-326_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-340l_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-340l_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-343_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-343_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-345_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-345_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-726-4_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-726-4_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1100-4_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1100-4_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1200-05_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1200-05_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:o:dlink:dns-1550-04_firmware:20240814:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "dns-1550-04_firmware",
                "vendor": "dlink",
                "versions": [
                  {
                    "status": "affected",
                    "version": "20240814"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-8132",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-26T14:03:22.896885Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-26T15:54:27.873Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-120",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNR-202L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-315L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-320",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-320L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-320LW",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-321",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNR-322L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-323",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-325",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-326",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-327L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNR-326",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-340L",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-343",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-345",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-726-4",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-1100-4",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-1200-05",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            },
            {
              "modules": [
                "HTTP POST Request Handler"
              ],
              "product": "DNS-1550-04",
              "vendor": "D-Link",
              "versions": [
                {
                  "status": "affected",
                  "version": "20240814"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Buaa1otTeam (VulDB User)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been classified as critical. This affects the function webdav_mgr of the file /cgi-bin/webdav_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument f_path leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced."
            },
            {
              "lang": "de",
              "value": "Es wurde eine Schwachstelle in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 bis 20240814 ausgemacht. Sie wurde als kritisch eingestuft. Dabei betrifft es die Funktion webdav_mgr der Datei /cgi-bin/webdav_mgr.cgi der Komponente HTTP POST Request Handler. Durch Beeinflussen des Arguments f_path mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.5,
                "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-77",
                  "description": "CWE-77 Command Injection",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-08-24T18:00:05.836Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-275703 | D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/?id.275703"
            },
            {
              "name": "VDB-275703 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/?ctiid.275703"
            },
            {
              "name": "Submit #396293 | D-Link DNS 320/320L/321/323/325/327L Command Injection",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/?submit.396293"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/BuaaIOTTeam/Iot_Dlink_NAS/blob/main/DNS_webdav_mgr.md"
            },
            {
              "tags": [
                "related"
              ],
              "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://www.dlink.com/"
            }
          ],
          "tags": [
            "unsupported-when-assigned"
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2024-08-23T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2024-08-23T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2024-08-23T20:35:17.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2024-8132",
        "datePublished": "2024-08-24T18:00:05.836Z",
        "dateReserved": "2024-08-23T18:30:00.444Z",
        "dateUpdated": "2024-08-26T15:54:41.469Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.