Unsupported Products at Risk of Buffer Overflow Vulnerability

CVE-2024-7828

What is CVE-2024-7828?

A critical buffer overflow vulnerability exists within various D-Link Network Attached Storage (NAS) devices due to improper handling of the album_name argument in the cgi_set_cover function of the photocenter_mgr.cgi script. This flaw allows an attacker to exploit the system remotely, potentially leading to unauthorized access or system compromise. It's important to note that this vulnerability impacts products that are no longer supported by D-Link, and users are strongly advised to replace affected devices, as they are considered end-of-life. The vulnerability has been publicly disclosed, increasing the risk of exploitation.

References