Lucene search
PRIOn knowledge basePRION:CVE-2023-4542HistoryAug 25, 2023 - 10:15 p.m.
Command injection
2023-08-2522:15:00
PRIOn knowledge base
www.prio-n.com
13
d-link
dar-8000-10
critical
file manipulation
remote attack
os command injection
public exploit
vulnerability disclosure
vendor non-response
nvd
A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238047. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dar-8000-10_firmware | eq | <= 202389 |
Related
nuclei
nuclei
D-Link DAR-8000-10 - Command Injection
2024-05-23 06:33:58
cve
cve
CVE-2023-4542
2023-08-25 22:15:11
nvd
nvd
CVE-2023-4542
2023-08-25 22:15:11
cvelist
cvelist
CVE-2023-4542 D-Link DAR-8000-10 sys1.php os command injection
2023-08-25 21:31:04