2 lines
15 KiB
JSON
2 lines
15 KiB
JSON
{"affected":[{"affectedData":[{"product":"DNS-120","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNR-202L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-315L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-320","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-320L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-320LW","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-321","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNR-322L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-323","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-325","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-326","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-327L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNR-326","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-340L","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-343","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-345","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-726-4","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-1100-4","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-1200-05","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]},{"product":"DNS-1550-04","vendor":"D-Link","versions":[{"status":"affected","version":"20260205"}]}],"source":"cna@vuldb.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dnr-202l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E20A03F5-6985-4917-8E5B-48963FB62AF2","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dnr-202l:-:*:*:*:*:*:*:*","matchCriteriaId":"07A92F2C-16FD-4A53-8066-83FEC2818DF5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dnr-326_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"926D7527-749C-4EDC-BF6A-76A199D5C1B5","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dnr-326:-:*:*:*:*:*:*:*","matchCriteriaId":"33CB308B-CF82-4E40-B2DC-23EBD48CD130","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-1100-4_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"84EB9230-7817-44C4-B248-BA9C1CEC2A41","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-1100-4:-:*:*:*:*:*:*:*","matchCriteriaId":"D5D08ED7-3E7F-4D30-890E-6535F6C34682","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-120_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F37C8F08-CEE9-4D2B-A273-B0AB57B874B5","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-120:-:*:*:*:*:*:*:*","matchCriteriaId":"6E161E54-2FE9-4359-9B2D-8700D00DE8E7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-1200-05_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E85AC494-B63A-450E-BCDA-EC9C53A90A5A","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-1200-05:-:*:*:*:*:*:*:*","matchCriteriaId":"D042C75D-6731-46B2-B11E-A009B9029B3F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-1550-04_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FAE008F5-7F73-4572-B575-FF0AD3FA2A78","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-1550-04:-:*:*:*:*:*:*:*","matchCriteriaId":"E691E775-382C-4BA9-AA44-FBC3148D3E54","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-315l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0D1F595A-2595-4D20-A7F7-D0D954F72554","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-315l:-:*:*:*:*:*:*:*","matchCriteriaId":"03C5CED7-55A7-4026-95CD-A2ADB5853823","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-320_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8E07DE4E-1B8A-4B92-BBFB-7EAED86F04FB","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-320:-:*:*:*:*:*:*:*","matchCriteriaId":"A0F5355E-F68D-49FE-9793-1FD9BD9AF3E1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-320l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CF83B802-8DD9-48D3-9DAC-C24774163FA4","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-320l:-:*:*:*:*:*:*:*","matchCriteriaId":"6C677E53-6885-4EC4-A7CC-E24E8F445F59","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-320lw_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7F8FFDF4-6DDA-4FD8-A0E8-19C31187DBAD","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-320lw:-:*:*:*:*:*:*:*","matchCriteriaId":"45467ABC-BAA9-4EB0-9F97-92E31854CA8B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-321_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"37D1BADB-2F38-40B0-A709-098C89249763","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-321:-:*:*:*:*:*:*:*","matchCriteriaId":"2A278BC9-6197-43D9-93C2-3DF760856FB7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-322l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"984FFAAE-E211-4CDA-9C5A-663DCA8867E7","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-322l:-:*:*:*:*:*:*:*","matchCriteriaId":"82DD4836-A87C-42CC-A41B-B97B1BCA4886","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-323_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"90990A02-23AC-4A71-9095-C703C2F718CE","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-323:-:*:*:*:*:*:*:*","matchCriteriaId":"94ED678A-AB4C-4637-B0D8-C232A0BB5D5F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-325_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3DCCD0CB-A8C6-455F-9888-A86BB933E68E","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-325:-:*:*:*:*:*:*:*","matchCriteriaId":"8042169D-D9FA-4BD6-90D1-E0DE269E42B9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-326_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7B8293E4-993E-43E8-8FD0-F76DF42F1EA1","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-326:-:*:*:*:*:*:*:*","matchCriteriaId":"D26F4F77-A6E3-4D7D-A781-BEB5FF7BC44F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D4823E56-B773-4855-AAA1-204ECCB443F3","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-327l:-:*:*:*:*:*:*:*","matchCriteriaId":"DB305B29-7F89-4A52-9ECF-3DB0BDD2350D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-340l_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"70B8EE5F-52E8-48CC-A08B-0F18976078B2","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-340l:-:*:*:*:*:*:*:*","matchCriteriaId":"0646B20C-5642-4CEA-A96C-7E82AD94A281","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-343_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AE10B057-CB8F-4DAA-8F4F-790EC3D828A9","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-343:-:*:*:*:*:*:*:*","matchCriteriaId":"F968791D-D3BD-442C-818E-4E878B12776D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-345_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F90663BB-9C43-472F-9E79-91566C0DA82E","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-345:-:*:*:*:*:*:*:*","matchCriteriaId":"C7E56821-7EA0-4CA1-BA17-7FD4ED9F794C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dlink:dns-726-4_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9CBA8638-A030-43BC-A86F-09BA6F9189B8","versionEndIncluding":"2026-02-05","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dlink:dns-726-4:-:*:*:*:*:*:*:*","matchCriteriaId":"75E5010F-21BA-4B6B-B00C-2688268FD67B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks."},{"lang":"es","value":"Se ha descubierto una falla de seguridad en D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 y DNS-1550-04 hasta 20260205. La función afectada es Webdav_Access_List del archivo /cgi-bin/file_center.cgi. Al realizar una manipulación del argumento cmd, se producen controles de acceso inadecuados. Es posible iniciar el ataque de forma remota. El exploit ha sido liberado al público y puede ser utilizado para ataques."}],"id":"CVE-2026-5311","lastModified":"2026-10-26T21:10:00.170","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"cna@vuldb.com","type":"Secondary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"cna@vuldb.com","type":"Secondary"}],"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"PROOF_OF_CONCEPT","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"cna@vuldb.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5311","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-02T15:26:11.181157Z","version":"2.0.3"}}]},"published":"2026-04-01T20:16:29.950","references":[{"source":"cna@vuldb.com","tags":["Exploit","Third Party Advisory"],"url":"https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_171/171.md"},{"source":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://vuldb.com/submit/780441"},{"source":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://vuldb.com/vuln/354640"},{"source":"cna@vuldb.com","tags":["Permissions Required","VDB Entry"],"url":"https://vuldb.com/vuln/354640/cti"},{"source":"cna@vuldb.com","tags":["Product"],"url":"https://www.dlink.com/"}],"sourceIdentifier":"cna@vuldb.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-266"},{"lang":"en","value":"CWE-284"}],"source":"cna@vuldb.com","type":"Secondary"}]}
|