Lucene search

[email protected]CVE-2023-42406

HistoryOct 26, 2023 - 10:15 p.m.

CVE-2023-42406

2023-10-2622:15:08

CWE-89

[email protected]

web.nvd.nist.gov

cve-2023-42406

sql injection

d-link

online behavior audit gateway

dar-7000

remote code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

Affected configurations

NVD

Node

dlinkdar-7000Match-

AND

dlinkdar-7000_firmwareMatch31r02b1413c

CPENameOperatorVersion
dlink:dar-7000_firmwaredlink dar-7000 firmwareeq31r02b1413c

CPE	Name	Operator	Version
dlink:dar-7000_firmware	dlink dar-7000 firmware	eq	31r02b1413c

References

github.com/1dreamGN/CVE/blob/main/CVE-2023-42406.md

github.com/flyyue2001/cve/blob/main/D-LINK%20-DAR-7000_sql_:sysmanage:editrole.php.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

Related for CVE-2023-42406

prion1 cvelist1 nvd1