Approved changes feed: RSS · Atom

cpe:2.3:a:d-link:dns-343_sharecenter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDns 343 Sharecenter (affec304-7721-5f51-95eb-9523d34fbd68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25120 vulnerable 2026-06-08 05:11:29.421873 D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test
D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.
Published: 2025-10-29T18:39:03.581Z
Updated: 2026-05-14T02:06:31.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.