CVE-2024-52781

CRITICAL
Published Nov 29, 2024 Modified Nov 6, 2025

Description

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php.

Is your site exposed to CVE-2024-52781?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor Product
dcnetworks dcme-720_firmware
dcnetworks dcme-720
dcnetworks dcme-320-l_firmware
dcnetworks dcme-320-l
dcnetworks dcme-320_firmware
dcnetworks dcme-320
dcnetworks dcme-520_firmware
dcnetworks dcme-520

References

Frequently Asked Questions

What is CVE-2024-52781? +
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/tool/traceroute.php. It has a CVSS v3.1 base score of 9.8 (CRITICAL).
How severe is CVE-2024-52781? +
CVE-2024-52781 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.
What products are affected by CVE-2024-52781? +
CVE-2024-52781 affects products from dcnetworks, specifically: dcme-320, dcme-320-l, dcme-320-l_firmware, dcme-320_firmware, dcme-520, dcme-520_firmware, dcme-720, dcme-720_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-52781? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-52782 9.8

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist_new.php.
CVE-2024-48659 9.8

An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.
CVE-2024-51115 9.8

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.
CVE-2024-52777 9.8

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/system/basic/license_update.php.
CVE-2024-52778 9.8

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_hist.php.
CVE-2024-52779 9.8

DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /function/audit/newstatistics/mon_stat_top10.php.

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-52781 — free, no signup required.