CVE-2024-5292 : faille élevée dlink network assistant (CVSS 7.8)

D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of D-Link Network Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DNACore service. The service loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21426.

Sévérité

Élevée (CVSS 7.8)

Vecteur CVSS

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

23 mai 2024

Dernière mise à jour

17 juin 2026

• dlink network assistant

• Fiche CVE-2024-5292 sur le NVD (NIST)
• zerodayinitiative.com/advisories/ZDI-24-443/