Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

DNS-120 — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in DNS-120, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive vulnerability aggregation for the DNS-120 product, focusing on Common Weakness Enumeration (CWE) classifications and associated security tags. It collects a wide spectrum of known security flaws affecting this device, including but not limited to remote code execution, privilege escalation, cross-site scripting, and information disclosure vulnerabilities. The data covers a broad historical time range, capturing both recent critical findings and legacy issues that may still impact deployed systems. Visitors can utilize this resource to track vendor advisories from the manufacturer, gaining insights into how the developer responds to security reports and patches known defects over time. Additionally, users can gain a deeper understanding of specific weakness classes by observing their prevalence and context within the DNS-120 environment, helping to contextualize the risk of these flaws against industry benchmarks. Furthermore, the page serves as a detailed lookup tool for the product's vulnerability history, allowing security professionals to audit past incidents and assess the overall security posture of the device. This structured approach facilitates better risk management by providing a clear timeline of exposure and remediation efforts. By centralizing this information, the page supports informed decision-making for administrators and security analysts who need to prioritize mitigation strategies based on historical trends and current threat intelligence. The goal is to offer a transparent view of the product’s security landscape without overwhelming the reader with unstructured data.

Vendor: D-Link

CVE IDTitleCVSSSeverityPublished
CVE-2026-5312 D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control CWE-284 5.3 Medium2026-04-01
CVE-2026-5311 D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control CWE-284 5.3 Medium2026-04-01
CVE-2026-5215 D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control CWE-284 4.3 Medium2026-03-31
CVE-2026-5214 D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow CWE-121 8.8 High2026-03-31
CVE-2026-5213 D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow CWE-121 8.8 High2026-03-31
CVE-2026-5212 D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow CWE-121 8.8 High2026-03-31
CVE-2026-5211 D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow CWE-121 8.8 High2026-03-31
CVE-2026-4214 D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow CWE-121 8.8 High2026-03-16
CVE-2026-4213 D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow CWE-121 8.8 High2026-03-16
CVE-2026-4212 D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow CWE-121 8.8 High2026-03-16
CVE-2026-4211 D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow CWE-121 8.8 High2026-03-16
CVE-2026-4210 D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4209 D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4207 D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4205 D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4204 D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4203 D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection CWE-77 6.3 Medium2026-03-16
CVE-2026-4197 D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection CWE-77 6.3 Medium2026-03-15
CVE-2026-4196 D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection CWE-77 6.3 Medium2026-03-15
CVE-2026-4195 D-Link DNS-1550-04 wizard_mgr.cgi command injection CWE-77 6.3 Medium2026-03-15
CVE-2026-4194 D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control CWE-284 7.3 High2026-03-15
CVE-2024-8214 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection CWE-77 6.3 Medium2024-08-27
CVE-2024-8213 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection CWE-77 6.3 Medium2024-08-27
CVE-2024-8212 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection CWE-77 6.3 Medium2024-08-27
CVE-2024-8211 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection CWE-77 6.3 Medium2024-08-27
CVE-2024-8210 D-Link DNS-1550-04 hd_config.cgi sprintf command injection CWE-77 6.3 Medium2024-08-27
CVE-2024-8134 D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection CWE-77 6.3 Medium2024-08-24
CVE-2024-8133 D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection CWE-77 6.3 Medium2024-08-24
CVE-2024-8132 D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection CWE-77 6.3 Medium2024-08-24

All 43 known CVE vulnerabilities affecting DNS-120 with full Chinese analysis, references, and POCs where available.