Описание
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-8273
- https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_mgraccount_mgrdsk_mgrapp_mgr%20Multiple%20CGI%20OS%20Command%20Injection.md
- https://vuldb.com/submit/810082
- https://vuldb.com/vuln/362570
- https://vuldb.com/vuln/362570/cti
- https://www.dlink.com
EPSS
5.1 Medium
CVSS4
4.7 Medium
CVSS3
CVE ID
Дефекты
Связанные уязвимости
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely.
Уязвимость сценариев system_mgr.cgi, account_mgr.cgi, dsk_mgr.cgi и app_mgr.cgi микропрограммного обеспечения сетевых хранилищ D-Link DNS-320, позволяющая нарушителю выполнить произвольные команды
EPSS
5.1 Medium
CVSS4
4.7 Medium
CVSS3