NetSight
critical9.8

CVE-2024-52778

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstati…

Impact

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.

Affected products

VendorProductAffected versions
DcnetworksDcme-720 Firmware
through 9.1.5.11
DcnetworksDcme-320-L Firmware
through 9.3.5.26
DcnetworksDcme-320 Firmware
through 7.4.12.90
DcnetworksDcme-520 Firmware
through 9.25.5.11

References