VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Aug 24, 2024· Updated Jun 17, 2026

CVE-2024-8127

CVE-2024-8127

Description

A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This vulnerability affects the function cgi_unzip of the file /cgi-bin/webfile_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument path leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

43
  • Dlink/DNS-120llm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • Dlink/DNR-202Lllm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-315Lllm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • D-Link/DNS-726-4v5
    Range: 20240814
  • Dlink/DNR-326cpe-rescue2 versions
    20240814+ 1 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-320cpe-rescue7 versions
    20240814+ 6 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-343cpe-rescue2 versions
    20240814+ 1 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • Dlink/DNS 1100 4 Firmwarecpe-rescue2 versions
    20240814+ 1 more
    • (no CPE)range: 20240814
    • cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 1200 05 Firmwarecpe-rescue3 versions
    20240814+ 2 more
    • (no CPE)range: 20240814
    • cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS-1550-04cpe-rescue
    Range: 20240814
  • Dlink/DNS-327Lcpe-rescue
    Range: 20240814
  • Dlink/DNS-340Lcpe-rescue
    Range: 20240814
  • Dlink/DNS 1550 04 Firmware
    cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 726 4 Firmware
    cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 345 Firmware
    cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 343 Firmware
    cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 340l Firmware
    cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 326 Firmware
    cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 327l Firmware2 versions
    cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 326 Firmware
    cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 325 Firmware3 versions
    cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 322l Firmware
    cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 321 Firmware
    cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 320lw Firmware
    cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 320 Firmware
    cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 202l Firmware
    cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.