Lucene search
PRIOn knowledge basePRION:CVE-2023-45208HistoryOct 10, 2023 - 5:15 a.m.
Command injection
2023-10-1005:15:00
PRIOn knowledge base
www.prio-n.com
7
command injection
parsing xml
d-link dap-x1860
repeater
denial of service
crafted ssid
shell commands
root access
A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names containing single quotes (in the range of the repeater) can result in a denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dap-1860_firmware | eq | 1.00 | |
| dap-1860_firmware | eq | 1.1b5-1 | |
| dap-1860_firmware | eq | 1.1.0-b94 |
Related
cve
cve
CVE-2023-45208
2023-10-10 05:15:09
cvelist
cvelist
CVE-2023-45208
2023-10-10 00:00:00
nvd
nvd
CVE-2023-45208
2023-10-10 05:15:09
thn
thn