{"schemaVersion":3,"id":"CVE-2024-5299","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the execMonitorScript method. The issue results from an exposed dangerous method. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21828.","dates":{"published":"2024-05-23T21:30:14.551Z","modified":"2024-08-01T21:11:11.554Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01819,"percentile":0.78418,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01819},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01819,"percentile":0.78418}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01819,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01819,"percentile":0.78418}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-749","name":"Exposed Dangerous Method or Function","description":"The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/749.html"}],"affected":[{"vendor":"d-link","product":"d-view","name":"D-View","label":"d-view","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.0.1.28","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.0.1.28","eol":null,"hubHref":"/vendor/d-link/d-view"},{"vendor":"dlink","product":"d-view_8","name":"d-view 8","label":"d-view_8","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.0.1.28","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.0.1.28","eol":null,"hubHref":"/vendor/dlink/d-view_8"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-450/","label":"www.zerodayinitiative.com/advisories/ZDI-24-450/","hostname":"www.zerodayinitiative.com","tags":["X Research Advisory","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-05-23T21:30:14.551Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-01T21:11:11.554Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:29:31.991Z","stale":false,"partial":false}}