CVE-2023-5146

CVE-2023-5146 affects D-Link DAR-7000 and DAR-8000 (versions up to 20151231). The vulnerability resides in the /sysmanage/updatelib.php endpoint, where manipulation of the file_upload parameter enables unrestricted file upload, potentially allowing remote command execution. The affected devices a...

CVE-2023-5146 D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...