Critical severity9.8NVD Advisory· Published Sep 14, 2023· Updated Jun 17, 2026

CVE-2023-39638

Description

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbc_system function at /htdocs/cgibin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/DIR-859cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: A1 1.05, A1 1.06B01 Beta01

Patches

Vulnerability mechanics

References

github.com/mmmmmx1/dlink/blob/main/dir-859/readme.mdnvdExploitThird Party Advisory
www.dlink.com.cn/techsupport/ProductInfo.aspxnvdProduct
www.dlink.com/en/security-bulletin/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000