GCVE - cpe:2.3:o:dlink:dns-320_firmware:2.06b01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dns-320_firmware:2.06b01:*:*:*:*:*:*:*

part: o version: 2.06b01 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dns 320 Firmware (`b3b3cc39-6afa-5a69-afc3-e80b194ebbeb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-8273`	vulnerable	2026-06-08 08:08:58.268110	D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection MEDIUM (4.7) A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attack remotely. Published: 2026-05-11T04:30:10.364Z Updated: 2026-05-11T14:16:09.030Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/362570 https://vuldb.com/vuln/362570/cti https://vuldb.com/submit/810082 https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20%20system_mgraccount_mgrdsk_mgrapp_mgr%20Multiple%20CGI%20OS%20Command%20Injection.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-8272`	vulnerable	2026-06-08 08:08:58.267451	D-Link DNS-320 webfile_mgr.cgi chown os command injection MEDIUM (4.7) A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Published: 2026-05-11T04:15:09.863Z Updated: 2026-05-12T13:42:32.061Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/362569 https://vuldb.com/vuln/362569/cti https://vuldb.com/submit/810079 https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20webfile_mgr.cgi%20Multiple%20OS%20Command%20Injection%20via%20File%20Operations.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-8271`	vulnerable	2026-06-08 08:08:58.266244	D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection MEDIUM (4.7) A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Published: 2026-05-11T04:00:11.457Z Updated: 2026-05-11T10:19:22.797Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/362568 https://vuldb.com/vuln/362568/cti https://vuldb.com/submit/810078 https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/D-Link%20DNS-320%20network_mgr.cgi%20Multiple%20OS%20Command%20Injection%20Vulnerabilities.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25506`	vulnerable	2026-06-08 05:22:36.799785	Details available D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. Published: 2021-02-02T13:00:11.000Z Updated: 2025-10-21T23:35:29.264Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10183 https://gist.github.com/WinMin/6f63fd1ae95977e0e2d49bd4b5f00675	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.