Lucene search
HistoryApr 12, 2023 - 5:15 p.m.
CVE-2023-27216
cve-2023-27216
d-link
dsl-3782
arbitrary code execution
network settings page
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.4%
An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
Affected configurations
Node
dlinkdsl-3782_firmwareMatch1.03
dlinkdsl-3782Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| dlink:dsl-3782_firmware | dlink dsl-3782 firmware | eq | 1.03 |
Related
cvelist
cvelist
CVE-2023-27216
2023-04-12 00:00:00
nvd
nvd
CVE-2023-27216
2023-04-12 17:15:07
prion
prion
Code injection
2023-04-12 17:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2023-27216