CVE-2023-42406 in DAR-7000

Riassunto

di MITRE • 27/10/2023

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 08/09/2023
• Divulgazione: 27/10/2023
• Moderazione: accettato
• Voce: VDB-243668
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.01947
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-42406
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-42406
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-42406/