CVE-2023-44425 D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability

D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

CVE-2023-44425

The CVE-2023-44425 issue affects D-Link DIR-X3260 routers, specifically the prog.cgi handler for HNAP requests on the lighttpd webserver (ports 80/443). It stems from insufficient validation of a user-supplied string before it is used in a system call, allowing an attacker to execute code with ro...