PT-2023-5871 · D Link · D-Link Dsl-3782

Published 2023-02-10 · Updated 2024-09-18 · CVE-2023-44959

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DSL-3782 versions 1.03 and earlier

Description The issue allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page. This is related to the lack of protection measures for the web page structure when handling the Router IP Address fields. Exploitation of the issue can allow a remote attacker to execute arbitrary code.

Recommendations For D-Link DSL-3782 versions 1.03 and earlier, consider disabling access to the network settings page until a patch is available. Restrict access to the Router IP Address fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

XSS

Weakness Enumeration

CWE-77

CWE-79

Related Identifiers

BDU:2023-06564

CVE-2023-44959

Affected Products

D-Link Dsl-3782

References · 8

• 🔥 https://github.com/FzBacon/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection/blob/master/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection.md#cve-2023-27216_d-link_dsl-3782_router_command_injection · Exploit
• https://bdu.fstec.ru/vul/2023-06564 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-44959 · Security Note
• https://osv.dev/vulnerability/CVE-2023-44959 · Vendor Advisory
• https://t.me/cvenotify/95153 · Telegram Post
• https://t.me/cvenotify/59167 · Telegram Post
• https://vuldb.com/?id.241628 · Note
• https://t.me/latest_high_impact_cve/18 · Telegram Post