CVE-2023-5074: critical vulnerability in D-Link D-View 8
Authentication Bypass in D-Link D-View 8
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
77Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 70%
from disclosure to weapon
Published on NVDSep 20
VulnCheck+75d
Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
D-Link · D-View 8Related CVEs — D-Link D-View 8
In the same product, most dangerous first.