CVE-2023-43207

D-LINK DWL-6610 FWv4.3.0.8B003C was discovered to contain a command injection vulnerability in the function configuploadhandler. This vulnerability allows attackers to execute arbitrary commands via the configRestore parameter...

CVE-2023-43207

The CVE-2023-43207 issue affects D-LINK DWL-6610 FW 4.3.0.8B003C, exposing a command-injection in the config_upload_handler via the configRestore parameter, enabling arbitrary command execution. The root cause is improper handling/neutralization of OS commands issued through configRestore. Impact...