The vulnerability of the uci_del() function in the /goform/delete_prohibiting subroutine of D-Link DIR-823X router’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the ucidel function in the /goform/deleteprohibiting function of the D-Link DIR-823X router’s microprogramming software is related to the failure to take appropriate data cleaning measures at the control level when processing the delvalue parameter. Exploitation of this...