cbcvebase.

D-Link Dir-823G Firmware vulnerabilities

1 known vulnerability affecting d-link/dir-823g_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-7297P2CRITICALCVSS 9.8≤ 1.02b032019-01-31
CVE-2019-7297 [CRITICAL] CWE-78 CVE-2019-7297: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injectio An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address.
nvd
D-Link Dir-823G Firmware vulnerabilities | cvebase