CVE-2023-5143

🗓️ 24 Sep 2023 22:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 142 Views🌐 WEB

CVE-2023-5143: Critical vulnerability in D-Link DAR-7000 up to 2015123

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-5143	25 Sep 202302:33	–	circl
CNNVD	D-Link DAR-7000 Security Breach	24 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation	24 Sep 202322:31	–	cvelist
EUVD	EUVD-2023-57481	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5143	24 Sep 202323:15	–	nvd
Prion	Design/Logic Flaw	24 Sep 202323:15	–	prion
Positive Technologies	PT-2023-5719 · D Link · D-Link Dar-7000	16 Sep 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation	24 Sep 202322:31	–	vulnrichment

NVD

Vulners

Node

dlink dar-7000_firmwareRange≤20151231

AND

dlink dar-7000Match-

[
  {
    "vendor": "D-Link",
    "product": "DAR-7000",
    "versions": [
      {
        "version": "20151231",
        "status": "affected"
      }
    ]
  }
]

Source	Link
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/ggg48966/cve/blob/main/D-LINK%20-DAR-7000_rce_%20webmailattach.md

Parameter	Position	Path	Description	CWE
table_name	query param	/log/webmailattach.php	Vulnerability where manipulating the table_name parameter on /log/webmailattach.php can lead to an unknown weakness; exploit disclosed and may be used.	CWE-20

06 Mar 2025 16:15Current

8.1High risk

Vulners AI Score8.1

CVSS 3.16.3 - 9.8

CVSS 26.5

CVSS 36.3

EPSS0.00446

SSVC

CWE-20