CVE-2023-5144

An advisory describes CVE-2023-5144 as a critical vulnerability in D-Link DAR-7000/DAR-8000 (up to 2015-12-31) affecting an unknown function in /sysmanage/updateos.php. Manipulating the file_upload parameter leads to unrestricted upload, enabling remote execution. The affected devices are end-of-...

CVE-2023-5144 D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...