CVE-2024-52782 - Vulnerability Details - OpenCVE

ReportizFlow

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Dcnglobal	Dcme-320-l Firmware Dcme-320 Firmware Dcme-520 Firmware Dcme-720 Firmware

No data.

No data.

References

Link	Providers
https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/

History

Fri, 29 Nov 2024 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Dcnglobal Dcnglobal dcme-320-l Firmware Dcnglobal dcme-320 Firmware Dcnglobal dcme-520 Firmware Dcnglobal dcme-720 Firmware
CPEs		cpe:2.3:o:dcnglobal:dcme-320-l_firmware:::::::: cpe:2.3:o:dcnglobal:dcme-320_firmware:::::::: cpe:2.3:o:dcnglobal:dcme-520_firmware:-:::::::* cpe:2.3:o:dcnglobal:dcme-720_firmware:-:::::::*
Vendors & Products		Dcnglobal Dcnglobal dcme-320-l Firmware Dcnglobal dcme-320 Firmware Dcnglobal dcme-520 Firmware Dcnglobal dcme-720 Firmware
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 29 Nov 2024 16:15:00 +0000

Type	Values Removed	Values Added
Description		DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
References		https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-11-29T00:00:00

Updated: 2024-11-29T18:10:00.880Z

Reserved: 2024-11-15T00:00:00

Link: CVE-2024-52782

Vulnrichment

Updated: 2024-11-29T18:02:45.581Z

NVD

Status : Awaiting Analysis

Published: 2024-11-29T16:15:11.163

Modified: 2024-11-29T18:15:11.313

Link: CVE-2024-52782

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-52782", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-29T18:10:00.880Z", "dateReserved": "2024-11-15T00:00:00", "datePublished": "2024-11-29T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-11-29T16:06:36.838245"}, "descriptions": [{"lang": "en", "value": "DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-52782", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-29T18:03:14.399416Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-320_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.4.12.90"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-520_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.25.5.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-320-l_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.3.5.26"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-720_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.1.5.11"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-29T18:10:00.880Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-52782", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-29T16:06:36.838245", "dateReserved": "2024-11-15T00:00:00", "datePublished": "2024-11-29T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-11-29T16:06:36.838245"}, "descriptions": [{"lang": "en", "value": "DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-52782", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-11-29T18:03:14.399416Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:dcnglobal:dcme-320_firmware:*:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-320_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.4.12.90"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-520_firmware:-:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-520_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.25.5.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-320-l_firmware:*:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-320-l_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.3.5.26"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:dcnglobal:dcme-720_firmware:-:*:*:*:*:*:*:*"], "vendor": "dcnglobal", "product": "dcme-720_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.1.5.11"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2024-11-29T18:02:45.581Z"}, "title": "CISA ADP Vulnrichment"}]}, "dataVersion": "5.1"}