Уязвимость обнаружена в D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 и DNS-1550-04 до 20260205. Это влияет на функцию cgi_recovery/cgi_backup_now/cgi_set_schedule/cgi_set_rsync_server файла /cgi-bin/remote_backup.cgi. Манипуляция приводит к внедрению команды.
Атаку можно провести удаленно. Эксплойт был раскрыт публике и может быть использован.
Показать оригинальное описание (EN)
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function cgi_recovery/cgi_backup_now/cgi_set_schedule/cgi_set_rsync_server of the file /cgi-bin/remote_backup.cgi. The manipulation leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Характеристики атаки
Последствия
Строка CVSS v4.0
Тип уязвимости (CWE)
Уязвимые продукты 40
| Конфигурация | От (включительно) | До (исключительно) |
|---|---|---|
|
Dlink Dns-1550-04_Firmware
cpe:2.3:o:dlink:dns-1550-04_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-1550-04
cpe:2.3:h:dlink:dns-1550-04:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-315l_Firmware
cpe:2.3:o:dlink:dns-315l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-315l
cpe:2.3:h:dlink:dns-315l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-320_Firmware
cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-320
cpe:2.3:h:dlink:dns-320:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-320l_Firmware
cpe:2.3:o:dlink:dns-320l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-320l
cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-320lw_Firmware
cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-320lw
cpe:2.3:h:dlink:dns-320lw:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-321_Firmware
cpe:2.3:o:dlink:dns-321_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-321
cpe:2.3:h:dlink:dns-321:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-322l_Firmware
cpe:2.3:o:dlink:dns-322l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-322l
cpe:2.3:h:dlink:dns-322l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-323_Firmware
cpe:2.3:o:dlink:dns-323_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-323
cpe:2.3:h:dlink:dns-323:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-325_Firmware
cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-325
cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-326_Firmware
cpe:2.3:o:dlink:dns-326_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-326
cpe:2.3:h:dlink:dns-326:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-327l_Firmware
cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-327l
cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-340l_Firmware
cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-340l
cpe:2.3:h:dlink:dns-340l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-343_Firmware
cpe:2.3:o:dlink:dns-343_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-343
cpe:2.3:h:dlink:dns-343:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-345_Firmware
cpe:2.3:o:dlink:dns-345_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-345
cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-726-4_Firmware
cpe:2.3:o:dlink:dns-726-4_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-726-4
cpe:2.3:h:dlink:dns-726-4:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dnr-202l_Firmware
cpe:2.3:o:dlink:dnr-202l_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dnr-202l
cpe:2.3:h:dlink:dnr-202l:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dnr-326_Firmware
cpe:2.3:o:dlink:dnr-326_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dnr-326
cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-1100-4_Firmware
cpe:2.3:o:dlink:dns-1100-4_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-1100-4
cpe:2.3:h:dlink:dns-1100-4:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-120_Firmware
cpe:2.3:o:dlink:dns-120_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-120
cpe:2.3:h:dlink:dns-120:-:*:*:*:*:*:*:*
|
— | — |
|
Dlink Dns-1200-05_Firmware
cpe:2.3:o:dlink:dns-1200-05_firmware:*:*:*:*:*:*:*:*
|
— |
<= 2026-02-05
|
|
Dlink Dns-1200-05
cpe:2.3:h:dlink:dns-1200-05:-:*:*:*:*:*:*:*
|
— | — |