CyberRota Analysis
AI-GeneratedA vulnerability exists in the D-Link DNS-320 version 1.0.2, specifically within the upload functionality of the uploadify.php file, allowing for unrestricted file uploads. This weakness could enable remote attackers to exploit the system, potentially leading to unauthorized access or malicious file execution. Organizations using this device should prioritize patching or mitigating this vulnerability to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.