CVE-2023-5154

CWE-434 — Unrestricted File Upload3 documents3 sources

Severity

8.8HIGH

EPSS

80.0%

top 0.89%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Dlink Dar-8000 Firmware D-link Dar-8000

Timeline

PublishedSep 25

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-240250 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no l…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶NVDdlink/dar-8000_firmware2015-12-31

▶CVEListV5d-link/dar-800020151231

🔴Vulnerability Details

CVEList

D-Link DAR-8000 changelogo.php unrestricted upload↗2023-09-25

▶

GHSA

GHSA-j59c-pv3w-ph9q: ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as cr↗2023-09-25

▶