Description
D-Link 是中国友讯（D-Link）公司的一款NAS（网络附属存储）设备。D-Link 存在命令注入漏洞，未授权的攻击者可以通过该漏洞进行远程代码执行，从而控制服务器。
D-Link NAS设备 /cgi-bin/sc_mgr.cgi 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_41904294/article/details/143878595
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/D-Link/D-Link-NAS%E6%8E%A5%E5%8F%A3sc_mgr.cgi%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://www.wlaqsys.com/archives/11992
https://cn-sec.com/archives/3419076.html
https://www.secevery.com/toBugInfo?id=1857384281372672001
https://pentest-tools.com/vulnerabilities-exploits/d-link-nas-sc-mgrcgi-remote-code-execution_25825
https://nvd.nist.gov/vuln/detail/CVE-2024-10915