VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Aug 24, 2024· Updated Jun 17, 2026

CVE-2024-8128

CVE-2024-8128

Description

A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. This issue affects the function cgi_add_zip of the file /cgi-bin/webfile_mgr.cgi of the component HTTP POST Request Handler. The manipulation of the argument path leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

43
  • Dlink/Dnr 202l Firmware
    cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 322l Firmware
    cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:*
  • Dlink/Dnr 326 Firmware
    cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 1100 4 Firmware2 versions
    cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:*
    • (no CPE)range: 20240814
  • Dlink/DNS 1200 05 Firmware3 versions
    cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:*
    • (no CPE)range: 20240814
  • Dlink/DNS 1550 04 Firmware
    cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 325 Firmware3 versions
    cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 320 Firmware
    cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 320lw Firmware
    cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 321 Firmware
    cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 327l Firmware2 versions
    cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:*
    • cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 326 Firmware
    cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 340l Firmware
    cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 343 Firmware
    cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 345 Firmware
    cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS 726 4 Firmware
    cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:*
  • Dlink/DNS-120llm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • Dlink/DNR-202Lllm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-315Lllm-create2 versions
    <=20240814+ 1 more
    • (no CPE)range: <=20240814
    • (no CPE)range: 20240814
  • Dlink/DNR-326cpe-rescue2 versions
    20240814+ 1 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-1550-04cpe-rescue
    Range: 20240814
  • Dlink/DNS-320cpe-rescue7 versions
    20240814+ 6 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • Dlink/DNS-327Lcpe-rescue
    Range: 20240814
  • Dlink/DNS-340Lcpe-rescue
    Range: 20240814
  • Dlink/DNS-343cpe-rescue2 versions
    20240814+ 1 more
    • (no CPE)range: 20240814
    • (no CPE)range: 20240814
  • D-Link/DNS-726-4v5
    Range: 20240814

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.