Lucene search

Dir820La1 Firmware Security Vulnerabilities - 2023

cve

CVE-2023-25280

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

9.8CVSS

9.4AI Score

0.002EPSS

2023-03-16 01:15 AM

cve

CVE-2023-25281

A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp.

7.5CVSS

7.4AI Score

0.001EPSS

2023-03-16 01:15 AM