Unrated severityNVD Advisory· Published Oct 16, 2023· Updated Sep 18, 2024

CVE-2023-45577

Description

Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the wanid parameter of the H5/speedlimit.data function.

Affected products

Dlink/DI-7003GV2cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=23.08.25D1
Dlink/DI-7100G+V2.D1llm-fuzzy
Range: <=23.08.23D1
Dlink/DI-7100GV2llm-fuzzy
Range: =23.08.23D1

Patches

Vulnerability mechanics

References

github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug9.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000