CVE-2023-5153

Name of the Vulnerable Software and Affected Versions D-Link DAR-8000 up to 20151231

Description A critical vulnerability was found in the D-Link DAR-8000, affecting an unknown part of the file /Tool/querysql.php. This issue leads to sql injection and can be initiated remotely. The exploit has been disclosed to the public. The vulnerability is related to the lack of protection of the SQL query structure, allowing an attacker to execute arbitrary commands remotely.

Recommendations For D-Link DAR-8000 up to 20151231, the recommended course of action is to retire and replace the product, as it is no longer supported by the maintainer. As a temporary workaround, consider restricting access to the /Tool/querysql.php file to minimize the risk of exploitation. Avoid using this file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.