CVE-2024-7922
MEDIUMDescription
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and classified as critical. Affected by this issue is the function cgi_audio_search/cgi_create_playlist/cgi_get_album_all_tracks/cgi_get_alltracks_editlist/cgi_get_artist_all_album/cgi_get_genre_all_tracks/cgi_get_tracks_list/cgi_set_airplay_content/cgi_write_playlist of the file /cgi-bin/myMusic.cgi. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced.
Is your site exposed to CVE-2024-7922?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| dell | dns-120_firmware |
| dell | dns-120 |
| dell | dnr-202l_firmware |
| dell | dnr-202l |
| dell | dns-315l_firmware |
| dell | dns-315l |
| dell | dns-320_firmware |
| dell | dns-320 |
| dell | dns-320l_firmware |
| dell | dns-320l |
| dell | dns-320lw_firmware |
| dell | dns-320lw |
| dell | dns-321_firmware |
| dell | dns-321 |
| dell | dnr-322l_firmware |
| dell | dnr-322l |
| dell | dns-323_firmware |
| dell | dns-323 |
| dell | dns-325_firmware |
| dell | dns-325 |
| dell | dns-326_firmware |
| dell | dns-326 |
| dell | dns-327l_firmware |
| dell | dns-327l |
| dell | dnr-326_firmware |
| dell | dnr-326 |
| dell | dns-340l_firmware |
| dell | dns-340l |
| dell | dns-343_firmware |
| dell | dns-343 |
| dell | dns-345_firmware |
| dell | dns-345 |
| dell | dns-726-4_firmware |
| dell | dns-726-4 |
| dell | dns-1100-4_firmware |
| dell | dns-1100-4 |
| dell | dns-1200-05_firmware |
| dell | dns-1200-05 |
| dell | dns-1550-04_firmware |
| dell | dns-1550-04 |
References
Advisories & Patches
Exploits
Frequently Asked Questions
What is CVE-2024-7922? +
How severe is CVE-2024-7922? +
What products are affected by CVE-2024-7922? +
How do I check if I'm vulnerable to CVE-2024-7922? +
Related Vulnerabilities
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbol arguments …
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the …
Honeywell OneWireless Wireless Device Manager (WDM) for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command …
Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue has been found …
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management …
A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary …