Lucene search

China National Vulnerability DatabaseCNVD-2023-78314

HistorySep 26, 2023 - 12:00 a.m.

D-Link DIR-806 Command Execution Vulnerability

2023-09-2600:00:00

China National Vulnerability Database

www.cnvd.org.cn

d-link dir-806

wireless router

command execution

vulnerability

china

auo

remote_port parameter

filter

arbitrary commands

system

cnvd

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

JSON

The D-Link DIR-806 is a wireless router from China’s AUO (D-Link). The D-Link DIR-806 suffers from a command execution vulnerability that stems from the REMOTE_PORT parameter failing to correctly filter constructed command special characters, commands, etc. An attacker can exploit this vulnerability to execute arbitrary commands on the system.