← Vulnerability feed

Vulnerability record · CVE-2024-52781 · published 29 November 2024

CVE-2024-52781: Dcnetworks dcme-720 firmware vulnerability

DDcnetworks · Dcme 720 Firmware

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.

9.8 CVSS 3.1 Critical EPSS 0.71% · top 48.3%
9.8CVSS 3.1 base score
0.71%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/ Broken Link

Track CVE-2024-52781 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-52782Dcnetworks dcme-720 firmware vulnerabilityDCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audi…EPSS 0.71%9.8CVE-2024-52777Dcnetworks dcme-720 firmware vulnerabilityDCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/sys…EPSS 0.75%9.8CVE-2024-52778Dcnetworks dcme-720 firmware vulnerabilityDCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audi…EPSS 0.71%9.8CVE-2024-52779Dcnetworks dcme-720 firmware vulnerabilityDCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audi…EPSS 0.71%9.8CVE-2024-52780Dcnetworks dcme-720 firmware vulnerabilityDCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/syst…EPSS 0.71%9.8CVE-2024-51115Dcnetworks dcme-320 firmware command injection vulnerabilityDCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.EPSS 1.7%9.8CVE-2024-48659Dcnetworks dcme-320-l firmware command injection vulnerabilityAn issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.EPSS 1.1%2.1CVE-2025-9387Dcnetworks dcme-720 firmware command injection vulnerabilityA vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block…EPSS 9.3%

Source: NIST National Vulnerability Database (record CVE-2024-52781), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.