CVE-2023-24762

Summary

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.dlink.com/en/security-bulletin/
• https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.dlink.com/en/security-bulletin/
• https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho

• ←Previous
• Next→