CVE-2023-25280criticalunder attackCWE-78

CVE-2023-25280

Published · Updated

Follow this CVE+ Monitor DIR-820 Router

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 98%
from disclosure to weapon279 days
Published on NVDMar 16
1st PoC+279d
CISA KEV+564d
Action required by CISAfederal deadline: 2024-10-21

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

In short

A D-Link router has a critical flaw where attackers can inject malicious commands through the ping feature, allowing them to take complete control of the device with administrator privileges.

Technical detail

OS command injection vulnerability in the ping.ccp endpoint via the ping_addr parameter allows unauthenticated attackers to execute arbitrary commands with root privileges. The vulnerability stems from insufficient input validation on user-supplied parameters passed to system command execution functions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.