Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gfgw-92mr-c3gr

Опубликовано: 08 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 7.2

Описание

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 89%
0.03818
Низкий

7.3 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
6 месяцев назад

A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub_4208A0 of the file /goform/set_dmz of the component Configuration Handler. The manipulation of the argument dmz_host/dmz_enable results in os command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

CVSS3: 7.2
fstec
7 месяцев назад

Уязвимость функции sub_4208A0 (/goform/set_dmz) компонента Configuration Handler микропрограммного обеспечения маршрутизаторов D-link DIR-823X, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 89%
0.03818
Низкий

7.3 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-77
CWE-78