CVE-2023-32147

D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existin...

CVE-2023-32147

Summary: CVE-2023-32147 affects the D-Link DIR-2640 router. The issue is a LocalIPAddress handling flaw in the HNAP1 endpoint where a user-supplied string is used to build a system call without proper validation, enabling arbitrary code execution with root privileges. The vulnerability is reachab...