Back to the CVE list
CVE-2024-10914Proof of concept (PoC) published · CISASuited to automated attack · CISA

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

CVSS score

9.2

EPSS probability

%97.5

Risk score

9.0

Published

2 y ago

OverviewPublic Exploits (15)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
0xSS3K/CVE-2024-10914__POC
GitHub

PoC para explotar el CVE-2024-10914

Public PoCSource updated: 14.06.2026 01:54:18
G
TH-SecForge/CVE-2024-10914
GitHub

CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.

Public PoCSource updated: 09.06.2025 06:38:41
G
ThemeHackers/CVE-2024-10914
GitHub

CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.

Public PoCSource updated: 13.01.2026 11:56:57
G
yenyangmjaze/cve-2024-10914
GitHub

yenyangmjaze/cve-2024-10914

Public PoCSource updated: 19.02.2025 10:46:46
G
Tamirido30/CVE-2024-10914-Exploit
GitHub

CVE-2024-10914 Shell Exploit

Public PoCSource updated: 03.05.2025 12:52:11
G
dragonXZH/CVE-2024-10914
GitHub

A PoC exploit for CVE-2024-10914 - D-Link Remote Code Execution (RCE)

Public PoCSource updated: 24.12.2024 10:42:23
G
redspy-sec/D-Link
GitHub

CVE-2024-10914 D-Link Remote Code Execution (RCE)

Public PoCSource updated: 11.10.2026 13:22:07
G
jahithoque/CVE-2024-10914-Exploit
GitHub

CVE-2024-10914 is a critical vulnerability affecting the D-Link DNS-320, DNS-320LW, DNS-325, and DNS-340L up to version 20241028. The function cgi_user_add in the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add is the culprit, allowing attackers to inject operating system commands remotely.

Public PoCSource updated: 04.12.2024 05:31:27
G
retuci0/cve-2024-10914-port
GitHub

dlink vulnerability thing in python and rust

Public PoCSource updated: 27.11.2024 19:12:49
G
verylazytech/CVE-2024-10914
GitHub

POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS

Public PoCSource updated: 24.08.2026 14:52:35
G
Bu0uCat/D-Link-NAS-CVE-2024-10914-
GitHub

这是一个D-Link rce漏洞 检测程序 (★1)

Public PoCSource updated: 15.11.2024 16:59:44
G
imnotcha0s/CVE-2024-10914
GitHub

Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection (★0)

Public PoCSource updated: 10.11.2024 04:32:04
G
Egi08/CVE-2024-10914
GitHub

CVE-2024-10914_Manual testing with burpsuite (★0)

Public PoCSource updated: 16.11.2024 13:27:57
G
K3ysTr0K3R/CVE-2024-10914-EXPLOIT
GitHub

A PoC exploit for CVE-2024-10914 - D-Link Remote Code Execution (RCE) (★0)

Public PoCSource updated: 28.11.2024 08:33:14
G
silverxpymaster/CVE-2024-10914-Exploit
GitHub

CVE-2024-10914 Shell Exploit (★0)

Public PoCSource updated: 14.02.2025 18:26:40

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-10914"