Dcnetworks vulnerabilities
We track 3 vulnerabilities in Dcnetworks products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2026.
Latest Dcnetworks vulnerabilities
- 7.2 High severity
DCME-320: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of the component Web Management Backend. Performing a manipulation of the argument ip_list results in command inje
- 9.8 Critical severity
DCME-720: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ip_block.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command
- 8.8 High severity
dcfw-1800-sdc_firmware: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wget function in the /sbin/cloudadmin.sh component.