Lucene search

K
zdiRgodZDI-23-1512
HistoryOct 04, 2023 - 12:00 a.m.

(0Day) D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability

2023-10-0400:00:00
rgod
www.zerodayinitiative.com
13
vulnerability
remote attackers
arbitrary code
d-link d-view
coreservice_action_script
dangerous function
exploit
system context

EPSS

0.001

Percentile

28.8%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the coreservice_action_script action. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.

EPSS

0.001

Percentile

28.8%

Related for ZDI-23-1512