Command Injection Vulnerability in D-Link NAS Devices
CVE-2024-8211

9.8CRITICAL

Key Information:

Vendor: D-link
Status: Dns-120; Dnr-202l; Dns-315l; Dns-320
Vendor: CVE Published:; 27 August 2024

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A critical command injection vulnerability has been identified in specific D-Link NAS devices, impacting the cgi_FMT_Std2R1_DiskMGR function within the /cgi-bin/hd_config.cgi file. By manipulating the 'f_newly_dev' argument, an attacker may execute arbitrary commands remotely. The vulnerability affects models like DNS-120, DNS-320, and multiple others; importantly, it pertains to products that have reached their end-of-life status and are no longer supported by D-Link. The exploit has been publicly disclosed, urging users still operating these devices to consider immediate retirement and replacement to safeguard their networks.

Affected Version(s)

DNR-202L 20240814

DNR-322L 20240814

DNR-326 20240814

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-8211 - Proof of Concept