Command Injection Vulnerability in D-Link NAS Devices

CVE-2024-8214

What is CVE-2024-8214?

A significant command injection vulnerability exists in several D-Link network storage devices, specifically in the cgi_FMT_Std2R5_2nd_DiskMGR function within the /cgi-bin/hd_config.cgi file. This vulnerability allows an attacker to manipulate the f_source_dev argument, leading to remote execution of arbitrary commands. The affected models, which include various DNS series and DNR series devices, are no longer supported by D-Link and are considered end-of-life. Users are strongly recommended to retire affected devices and transition to supported alternatives to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References