CVE-2023-43206

Name of the Vulnerable Software and Affected Versions D-LINK DWL-6610AP version 4.3.0.8B003C

Description A command injection issue was discovered in the web cert download handler function, allowing attackers to execute arbitrary commands via the certDownload parameter. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations For D-LINK DWL-6610AP version 4.3.0.8B003C, as a temporary workaround, consider disabling the web cert download handler function until a patch is available. Restrict access to the certDownload parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.