CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the D-Link DNS-340L, specifically within the Add-On Center component's handling of parameters in the /cgi-bin/addon_center.cgi file, allowing for OS command injection. This flaw can be exploited remotely, potentially enabling attackers to execute arbitrary commands on the affected system. Organizations using this device should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-On Center. Such manipulation of the argument f_name/f_url/f_flag/f_login_user leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.