Описание
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- Broken Link
- Permissions RequiredThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Product
- Broken Link
Уязвимые конфигурации
Одновременно
Одно из
EPSS
4.7 Medium
CVSS3
7.2 High
CVSS3
5.8 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument target_addr leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Уязвимость функции sub_41710C (/goform/diag_nslookup) микропрограммного обеспечения маршрутизатора D-Link DIR-823X AX3000, позволяющая нарушителю выполнить произвольные команды
EPSS
4.7 Medium
CVSS3
7.2 High
CVSS3
5.8 Medium
CVSS2