CVE-2026-4209

MEDIUM

6.3

Descricao

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function cgi_create_import_users/cgi_user_batch_create/cgi_user_set_quota/cgi_user_del/cgi_user_modify/cgi_group_set_quota/cgi_group_modify/cgi_group_add/cgi_user_add/cgi_get_modify_group_info/cgi_chg_admin_pw of the file /cgi-bin/account_mgr.cgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Detalhes CVE

Pontuacao CVSS v3.16.3

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado3/16/2026

Ultima modificacao3/19/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

dlink:dnr-202ldlink:dnr-202l_firmwaredlink:dnr-326dlink:dnr-326_firmwaredlink:dns-1100-4dlink:dns-1100-4_firmwaredlink:dns-120dlink:dns-1200-05dlink:dns-1200-05_firmwaredlink:dns-120_firmwaredlink:dns-1550-04dlink:dns-1550-04_firmwaredlink:dns-315ldlink:dns-315l_firmwaredlink:dns-320dlink:dns-320_firmwaredlink:dns-320ldlink:dns-320l_firmwaredlink:dns-320lwdlink:dns-320lw_firmwaredlink:dns-321dlink:dns-321_firmwaredlink:dns-322ldlink:dns-322l_firmwaredlink:dns-323dlink:dns-323_firmwaredlink:dns-325dlink:dns-325_firmwaredlink:dns-326dlink:dns-326_firmwaredlink:dns-327ldlink:dns-327l_firmwaredlink:dns-340ldlink:dns-340l_firmwaredlink:dns-343dlink:dns-343_firmwaredlink:dns-345dlink:dns-345_firmwaredlink:dns-726-4dlink:dns-726-4_firmware