CVE-2022-28573

CVE-2022-28573 concerns D-Link DIR-823-Pro firmware v1.0.2 where the vulnerable function is SetNTPserverSeting(). The issue allows an attacker to trigger a command injection via the system_time_timezone parameter, enabling arbitrary command execution. Multiple connected sources (NVD, Red Hat, CVE...

CVE-2021-46457

The CVE-2021-46457 entry relates to D-Link DIR-823-Pro (v1.0.2). A command-injection vulnerability exists in the function ChgSambaUserSettings, allowing an attacker to execute arbitrary commands via the samba_name parameter. Connected sources (CNVD/CNNVD and CVE records) confirm the affected devi...

CVE-2021-46453

D-Link DIR-823-Pro v1.0.2 is affected by a command-injection vulnerability in SetStaticRouteSettings, allowing an attacker to execute arbitrary commands via the staticroute_list parameter. Affected component: the router’s SetStaticRouteSettings function; vulnerability type: command injection. Imp...

CVE-2021-46454

Summary (CVE-2021-46454): D-Link DIR-823-Pro v1.0.2 contains a command-injection vulnerability in the SetWLanApcliSettings function, allowing attackers to execute arbitrary commands via the ApCliKeyStr parameter. Multiple sources (CNVD/CNNVD/NVD entries) corroborate a network-exposed issue with t...

CVE-2021-46456

CVE-2021-46456 affects D-Link DIR-823-Pro v1.0.2. The vulnerability is a command injection in the function SetWLanACLSettings, exploitable via the wl(0).(0)_maclist parameter, allowing an attacker on the network to execute arbitrary commands. CVSS data in the initial entry indicate a network atta...

CVE-2021-46455

The CVE-2021-46455 entry concerns a vulnerability in D-Link DIR-823-Pro, affected firmware v1.0.2. The issue is a command injection in the SetStationSettings function, exploitable via the station_access_enable parameter. This can allow an attacker to execute arbitrary commands with network access...

CVE-2021-46452

CVE-2021-46452 affects D-Link DIR-823-Pro v1.0.2. A command-injection vulnerability exists in the SetNetworkTomographySettings function, enabling an attacker to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and t...

CVE-2025-45729

The D-Link DIR-823-Pro wireless router (version 1.02 ) is vulnerable to an improper privilege control flaw in its microprogrammed software. This deficiency allows unauthorized users to enable and access Telnet services , potentially granting an intruder unauthorized access to the device. While no...