VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
JVNDB-2024-003105     ( CVE-2024-3273 | CVE-2024-3273 | CVE-2024-3273 )
複数の D-Link Systems, Inc. 製品におけるコマンドインジェクションの脆弱性
https://jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-003105.html

Original

** サポート外 ** 本件は、サポートされていない製品における脆弱性です。 D-Link DNS-320L ファームウェア、dns-120 ファームウェア、dnr-202l ファームウェア等複数の D-Link Systems, Inc. 製品には、コマンドインジェクションの脆弱性が存在します。

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
JVN iPedia
First Published:
2024-04-19
Source Information Category:
Advisory, Alert
Last Updated:
2024-04-19




Affected Product Tags
cpe:/o:dlink:dnr-202l_firmware
cpe:/o:dlink:dnr-322l_firmware
cpe:/o:dlink:dnr-326_firmware
cpe:/o:dlink:dns-1100-4_firmware
cpe:/o:dlink:dns-1200-05_firmware
cpe:/o:dlink:dns-120_firmware
cpe:/o:dlink:dns-1550-04_firmware
cpe:/o:dlink:dns-315l_firmware
cpe:/o:dlink:dns-320_firmware
cpe:/o:dlink:dns-320l_firmware
cpe:/o:dlink:dns-320lw_firmware
cpe:/o:dlink:dns-321_firmware
cpe:/o:dlink:dns-323_firmware
cpe:/o:dlink:dns-325_firmware
cpe:/o:dlink:dns-326_firmware
cpe:/o:dlink:dns-327l_firmware
cpe:/o:dlink:dns-340l_firmware
cpe:/o:dlink:dns-343_firmware
cpe:/o:dlink:dns-345_firmware
cpe:/o:dlink:dns-726-4_firmware
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
None [?]

[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
Complete [?]

Alternatives
CISA Known Exploited Vulnerabilities Catalog CVE-2024-3273




Common Vulnerabilities and Exposures (CVE) CVE-2024-3273




National Vulnerability Database (NVD) CVE-2024-3273








References
JVNDB CWE-77 コマンドインジェクション




関連文書 github.com (dlink)




関連文書 supportannouncement.us.dlink.com (SAP10383)




関連文書 vuldb.com (id.259284)




関連文書 vuldb.com (submit.304661)





Copyright © 2024 JPCERT/CC All Rights Reserved.