CVE-2024-52782

CVE-2024-52782 is a critical remote code execution vulnerability affecting multiple DCME-series network devices, including DCME-320, DCME-520, DCME-320-L, and DCME-720, through the /function/audit/newstatistics/mon_stat_hist_new.php endpoint. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network without authentication or user interaction, allowing for complete compromise of confidentiality, integrity, and availability. While the EPSS score is low, indicating a lower likelihood of exploitation in the wild compared to other CVEs, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion. Organizations using affected DCME devices should prioritize patching to mitigate this severe risk.