Lucene search

MitreCVE-2023-51984

HistoryJan 11, 2024 - 4:15 p.m.

CVE-2023-51984

2024-01-1116:15:53

CWE-78

mitre

web.nvd.nist.gov

d-link

dir-822+

v1.0.2

vulnerability

command injection

remote attackers

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

43.9%

JSON

D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell.

Affected configurations

Nvd

Node

dlinkdir-822Match-

AND

dlinkdir-822_firmwareMatch1.0.2

VendorProductVersionCPE
dlinkdir-822-cpe:2.3:h:dlink:dir-822:-:*:*:*:*:*:*:*
dlinkdir-822_firmware1.0.2cpe:2.3:o:dlink:dir-822_firmware:1.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dlink	dir-822	-	cpe:2.3:h:dlink:dir-822:-:::::::*
dlink	dir-822_firmware	1.0.2	cpe:2.3:o:dlink:dir-822_firmware:1.0.2:::::::*

References

github.com/funny-mud-peee/IoT-vuls/blob/main/dir822+/1/readme.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

43.9%

JSON

Related for CVE-2023-51984