CVE-2019-13128

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.02B03

Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue allows for command injection via shell metacharacters in the IPAddress or Gateway field when using the SetStaticRouteSettings function.

Recommendations For D-Link DIR-823G version 1.02B03, as a temporary workaround, consider restricting access to the HNAP1 protocol or avoiding the use of shell metacharacters in the IPAddress or Gateway fields until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.