CyberRota Analysis
AI-GeneratedD-Link DNS-320L, DNS-327L, DNS-340L, and DNS-345 devices are vulnerable to a critical remote command injection flaw in the ISO Image Handler component, specifically within the /cgi-bin/isomount_mgr.cgi file. Successful exploitation allows attackers to execute arbitrary OS commands, posing a significant risk to system integrity and confidentiality. Organizations using these devices should prioritize immediate patching or mitigation efforts to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomount_mgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can be executed remotely. The exploit is now public and may be used.