Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qcx-pmvv-pwf4

Опубликовано: 08 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 7.2

Описание

A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

EPSS

Процентиль: 90%
0.04317
Низкий

7.3 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.2
nvd
6 месяцев назад

A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddns of the component DDNS Service. The manipulation of the argument ddnsType/ddnsDomainName/ddnsUserName/ddnsPwd leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

CVSS3: 7.2
fstec
7 месяцев назад

Уязвимость файла /goform/set_ddns компонента DDNS Service микропрограммного обеспечения маршрутизаторов D-link DIR-823X, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 90%
0.04317
Низкий

7.3 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-77