Описание
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.
Ссылки
- Broken LinkExploitThird Party Advisory
- ExploitThird Party Advisory
- US Government Resource
Уязвимые конфигурации
Одновременно
Одно из
EPSS
7.2 High
CVSS3
Дефекты
Связанные уязвимости
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.
Уязвимость файла /goform/set_prohibiting микропрограммного обеспечения маршрутизаторов D-link DIR-823X AX3000, позволяющая нарушителю выполнить произвольные команды
EPSS
7.2 High
CVSS3