CVE-2023-4542

creationtimestamp| type| source ---|---|--- 2023-08-26 02:24:34+00:00| seen| https://t.me/cibsecurity/69230 2023-10-11 14:23:34+00:00| published-proof-of-concept| https://t.me/CNArsenal/1265 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-15...

CVE-2023-4542

CVE-2023-4542 affects D-Link DAR-8000-10 (up to 20230809). The vulnerability arises from the id parameter in /app/sys1.php, enabling remote OS command injection via cmd, potentially allowing unauthenticated arbitrary command execution. Public exploit/poc exists (e.g., GitHub). Remediation: update...