The vulnerability of the SetNTPserverSeting() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetNTPserverSeting function in D-Link DIR-823-Pro wireless routers’ software lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the systemtimetimezone paramet...

D-Link DIR-823-Pro Command Injection Vulnerability (CNVD-2022-38531)

The D-Link DIR-823-Pro is a router. version 1.0.2 of the D-Link DIR-823-Pro is vulnerable to command injection, which stems from the failure to properly filter the construct command special characters, commands, etc. in the function SetNTPserverSeting, which can be exploited by attackers to execu...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...