Read the docs
TI-2014-06527 Aliases CVE-2014-7857GHSA-586h-8q3m-f5hh

D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326…

Priority MEDIUM 58CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.

Why it matters now

EPSS 0.15165 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:d-link:dns-322l_firmware:*:*:*:*:*:*:*:*up to 2.00b07VulnerableD-Link
cpe:2.3:h:dlink:dns-322l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:d-link:dns-325_firmware:*:*:*:*:*:*:*:*up to 1.05b03VulnerableD-Link
cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:d-link:dns-345_firmware:*:*:*:*:*:*:*:*up to 1.03b06VulnerableD-Link
cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:d-link:dns-320b_firmware:*:*:*:*:*:*:*:*up to 1.02b01VulnerableD-Link
cpe:2.3:h:dlink:dns-320b:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:d-link:dnr-326_firmware:*:*:*:*:*:*:*:*up to 1.40b03VulnerableD-Link
cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-322l_firmware:*:*:*:*:*:*:*:* Versions up to 2.00b07 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-322l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-325_firmware:*:*:*:*:*:*:*:* Versions up to 1.05b03 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-345_firmware:*:*:*:*:*:*:*:* Versions up to 1.03b06 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-320b_firmware:*:*:*:*:*:*:*:* Versions up to 1.02b01 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-320b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:d-link:dnr-326_firmware:*:*:*:*:*:*:*:* Versions up to 1.40b03 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:d-link:dns-327l_firmware:*:*:*:*:*:*:*:*up to 1.02VulnerableD-Link
cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:d-link:dns-320l_firmware:*:*:*:*:*:*:*:*up to 1.03b04VulnerableD-Link
cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-327l_firmware:*:*:*:*:*:*:*:* Versions up to 1.02 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:d-link:dns-320l_firmware:*:*:*:*:*:*:*:* Versions up to 1.03b04 Vulnerable ·D-Link
  • cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-7857
  2. 2026-10-03 Alias added: GHSA-586h-8q3m-f5hh

References

Advisory 2

Other 1

  • TI-2014-06529 Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW… CVSS 3.0CRITICAL 9.8
  • TI-2014-06528 The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers… CVSS 3.0CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences