CVE-2019-15529

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05

Description The issue is related to the lack of input validation in the Username field, allowing for command injection via shell metacharacters. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information by sending a request to the "HNAP1" endpoint.

Recommendations For version V1.0.2B05, consider disabling the HNAP1 endpoint or restricting access to it until a patch is available. Avoid using shell metacharacters in the Username field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.