CVE-2026-5312
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR…
Impact
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dns-1550-04 Firmware | through 2026-02-05 |
| Dlink | Dns-315l Firmware | through 2026-02-05 |
| Dlink | Dns-320 Firmware | through 2026-02-05 |
| Dlink | Dns-320l Firmware | through 2026-02-05 |
| Dlink | Dns-320lw Firmware | through 2026-02-05 |
| Dlink | Dns-321 Firmware | through 2026-02-05 |
| Dlink | Dns-322l Firmware | through 2026-02-05 |
| Dlink | Dns-323 Firmware | through 2026-02-05 |
| Dlink | Dns-325 Firmware | through 2026-02-05 |
| Dlink | Dns-326 Firmware | through 2026-02-05 |
| Dlink | Dns-327l Firmware | through 2026-02-05 |
| Dlink | Dns-340l Firmware | through 2026-02-05 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_172/172.md
- https://github.com/wudipjq/my_vuln/blob/main/D-Link8/vuln_173/173.md
- https://vuldb.com/submit/780442
- https://vuldb.com/submit/780443
- https://vuldb.com/vuln/354641
- https://vuldb.com/vuln/354641/cti
- https://www.dlink.com/