跳转到帖子

D-Link DIR (CVE-2023-25280): D-Link DIR-820 Router OS Command Injection Vulnerability

recommended_posts

发布于
  • Members

D-Link DIR (CVE-2023-25280): D-Link DIR-820 Router OS Command Injection Vulnerability

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
03/16/2023
Created
11/29/2024
Added
11/28/2024
Modified
11/29/2024

Description

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Solution(s)

  • dlink-retire-device

References

  • https://attackerkb.com/topics/cve-2023-25280
  • CVE - 2023-25280
  • https://www.dlink.com/en/security-bulletin/
  • 查看数 744
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…