D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection
Priority MEDIUM 57CWE-77Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-77.
Summary
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been rated as critical. This issue affects the function cgi_FMT_Std2R5_1st_DiskMGR of the file /cgi-bin/hd_config.cgi of the component HTTP POST Request Handler. The manipulation of the argument f_source_dev leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.07945 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| D-Link | DNS-120 | 20240814 | — | No fix listed | CNA |
| D-Link | DNR-202L | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-315L | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-320 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-320L | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-320LW | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-321 | 20240814 | — | No fix listed | CNA |
| D-Link | DNR-322L | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-323 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-325 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-326 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-327L | 20240814 | — | No fix listed | CNA |
| D-Link | DNR-326 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-340L | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-343 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-345 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-726-4 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-1100-4 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-1200-05 | 20240814 | — | No fix listed | CNA |
| D-Link | DNS-1550-04 | 20240814 | — | No fix listed | CNA |
- DNS-120 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNR-202L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-315L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-320 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-320L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-320LW VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-321 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNR-322L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-323 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-325 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-326 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-327L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNR-326 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-340L VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-343 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-345 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-726-4 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-1100-4 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-1200-05 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
- DNS-1550-04 VendorD-Link Affected 20240814 Fixed in — No fix listed CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-1550-04:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-1200-05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-1100-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-726-4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dns-1550-04_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-1550-04:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-1200-05_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-1200-05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-1100-4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-1100-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-726-4_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-726-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-345_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-343:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-340l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-326:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-323:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dnr-322l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-321:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-320lw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-315l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dnr-202l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
| cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | D-Link Japan K.K. |
| cpe:2.3:h:dlink:dns-120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | D-Link Japan K.K. |
- cpe:2.3:o:dlink:dns-343_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-340l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-340l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dnr-326_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-327l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-326_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-326:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-325_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-323_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-323:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dnr-322l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dnr-322l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-321_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-320lw_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-320lw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-320l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-320_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-315l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-315l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dnr-202l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dnr-202l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
- cpe:2.3:o:dlink:dns-120_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
- cpe:2.3:h:dlink:dns-120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-8134
- 2026-10-03 Alias added: GHSA-qff8-h2gh-57qq
References
More D-Link vulnerabilities
- TI-2024-03070 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection KEVCVSS 3.1CRITICAL 9.8
- TI-2024-03069 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials KEVCVSS 3.1CRITICAL 9.8
- TI-2024-00708 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal KEVCVSS 3.1CRITICAL 9.8
- TI-2023-10693 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to… KEVCVSS 3.1CRITICAL 9.8
- TI-2022-17249 D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
- TI-2022-09657 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE)… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-8134 · CVE Program
- CVE-2024-8134 · NVD
- FIRST EPSS
- GHSA-qff8-h2gh-57qq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences