CVE-2024-7828
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 15, 2024
Updated: Aug 19, 2024
CWE ID 120
Summary
CVE-2024-7828 is a newly disclosed critical vulnerability that affects several D-Link DNS models up to version 20240814. The issue lies in the function cgi_set_cover of the file /cgi-bin/photocenter_mgr.cgi, where the manipulation of the argument album_name leads to a buffer overflow. This vulnerability can be exploited remotely and the exploit has been made public. However, it is important to note that this vulnerability only affects unsupported D-Link products, which have already been notified by the vendor and should be retired and replaced.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.