CVE-2023-43206

Summary

D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug6.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug6.md

• ←Previous
• Next→