Critical severity9.8NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026

CVE-2023-42406

Description

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dar 7000 Firmware
cpe:2.3:o:dlink:dar-7000_firmware:31r02b1413c:*:*:*:*:*:*:*
D-Link/Online behavior audit gateway DAR-7000description
Dlink/DAR-7000llm-create
Range: V31R02B1413C

Patches

Vulnerability mechanics

References

github.com/1dreamGN/CVE/blob/main/CVE-2023-42406.mdnvdExploitThird Party Advisory
github.com/flyyue2001/cve/blob/main/D-LINK%20-DAR-7000_sql_:sysmanage:editrole.php.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000