PT-2023-6106 · D Link · D-Link D-View
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link D-View (affected versions not specified)
Description
The issue is related to the exposure of a dangerous function in the coreservice action script action of the D-Link D-View platform. This allows remote attackers to execute arbitrary code on affected installations without requiring authentication. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link D-View