CVE-2023-32137: falha de média gravidade em D-Link DAP-1360
D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 1.2%
D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of root.
. Was ZDI-CAN-18415.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
D-Link · DAP-1360CVEs relacionadas — D-Link DAP-1360
No mesmo produto, das mais perigosas para as menos.
CVE-2024-0717MEDIUMD-Link Good Line Router v2 HTTP GET Request devinfo information disclosureEPSS 18.2%CVE-2023-32136HIGHD-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.2%CVE-2023-32143HIGHD-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-32146HIGHD-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-32142HIGHD-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-32141HIGHD-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%