dcnetworks records

11 published records for vendor dcnetworks.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 8
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')3
CWE-434 Unrestricted Upload of File with Dangerous Type1
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2024-51115No exploit	DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.dcnetworks · dcme-320 firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.7%	Nov 5, 2024
39Monitor	CVE-2024-48659No exploit	An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.dcnetworks · dcme-320-l firmware · CWE-77 pre-auth RCE Command injection	Critical9.8	—	1.1%	Oct 21, 2024
39Monitor	CVE-2024-52777No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /fundcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.8%	Nov 29, 2024
39Monitor	CVE-2024-52780No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /funcdcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.7%	Nov 29, 2024
39Monitor	CVE-2024-52782No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /funcdcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.7%	Nov 29, 2024
39Monitor	CVE-2024-52781No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /funcdcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.7%	Nov 29, 2024
39Monitor	CVE-2024-52778No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /funcdcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.7%	Nov 29, 2024
39Monitor	CVE-2024-52779No exploit	DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /funcdcnetworks · dcme-720 firmware pre-auth RCE	Critical9.8	—	0.7%	Nov 29, 2024
35Monitor	CVE-2023-43321No exploit	File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wdcnetworks · dcfw-1800-sdc firmware · CWE-434 RCE File upload	High8.8	—	0.9%	Oct 4, 2023
13Monitor	CVE-2026-2000No exploit	DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injectiondcnetworks · dcme-320 firmware · CWE-74 RCE Command injection	Low2.0	—	18.1%	Feb 6, 2026
11Monitor	CVE-2025-9387No exploit	DCN DCME-720 Web Management Backend ip_block.php os command injectiondcnetworks · dcme-720 firmware · CWE-77 RCE Command injection	Low2.1	—	9.3%	Aug 24, 2025

CVE-2024-51115
40Plan
DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
dcnetworks · dcme-320 firmwareNov 5, 2024
CVE-2024-48659
39Monitor
An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
dcnetworks · dcme-320-l firmwareOct 21, 2024
CVE-2024-52777
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L, <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /fun
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2024-52780
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2024-52782
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2024-52781
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2024-52778
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2024-52779
39Monitor
DCME-320 <=7.4.12.90, DCME-520 <=9.25.5.11, DCME-320-L <=9.3.5.26, and DCME-720 <=9.1.5.11 are vulnerable to Remote Code Execution via /func
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
dcnetworks · dcme-720 firmwareNov 29, 2024
CVE-2023-43321
35Monitor
File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the w
HighCVSS 8.8No exploitEPSS 1%
- RCE
- File upload
dcnetworks · dcfw-1800-sdc firmwareOct 4, 2023
CVE-2026-2000
13Monitor
DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection
LowCVSS 2.0No exploitEPSS 18%
- RCE
- Command injection
dcnetworks · dcme-320 firmwareFeb 6, 2026
CVE-2025-9387
11Monitor
DCN DCME-720 Web Management Backend ip_block.php os command injection
LowCVSS 2.1No exploitEPSS 9%
- RCE
- Command injection
dcnetworks · dcme-720 firmwareAug 24, 2025