Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43119 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T16:19:08.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114378
CVE ID: CVE-2023-43120 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T16:16:48.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114377
CVE ID: CVE-2023-43121 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T16:13:41.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114376
CVE ID: CVE-2023-43122 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T19:37:23.592Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AC:L/AV:P/A:N/C:H/I:N/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader. Additional Analyst Notes: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-43123 State: PUBLISHED Published: 2023-11-23T09:16:34.705Z Last Updated: 2025-02-13T17:13:14.205Z Vendors: Apache Software Foundation Products: Apache Storm Problem Types: CWE-200 Description: On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method File.createTempFile on unix-like systems creates a file with predefined name (so easily identifiable) and by default will create this file with the permissions -rw-r--r--. Thus, if sensitive information
sily identifiable) and by default will create this file with the permissions -rw-r--r--. Thus, if sensitive information is written to this file, other local users can read this information. File.createTempFile(String, String) will create a temporary file in the system temporary directory if the 'java.io.tmpdir' system property is not explicitly set. This affects the class https://github.com/apache/storm/blob/master/storm-core/src/jvm/org/apache/storm/utils/TopologySpoutLag.java#L99 and was introduced by https://issues.apache.org/jira/browse/STORM-3123 In practice, this has a very limited impact as this class is used only if ui.disable.spout.lag.monitoring is set to false, but its value is tr
a very limited impact as this class is used only if ui.disable.spout.lag.monitoring is set to false, but its value is true by default. Moreover, the temporary file gets deleted soon after its creation. The solution is to use Files.createTempFile https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/nio/file/Files.html#createTempFile(java.lang.String,java.lang.String,java.nio.file.attribute.FileAttribute...) instead. We recommend that all users upgrade to the latest version of Apache Storm. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/88oc1vqfjtr29cz5xts0v2wm5pmhbm0l - http://www.openwall.com/lists/oss-security/2023/11/23/1
CVE ID: CVE-2023-43124 State: PUBLISHED Published: 2023-09-27T15:21:50.794Z Last Updated: 2024-09-23T15:06:23.816Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP Edge Client, F5 Access Problem Types: CWE-319 Description: BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000136907
CVE ID: CVE-2023-43125 State: PUBLISHED Published: 2023-09-27T15:22:07.212Z Last Updated: 2024-09-24T13:13:09.724Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Edge Client, F5 Access Problem Types: CWE-319 Description: BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000136909
CVE ID: CVE-2023-43128 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-25T13:28:26.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806 - https://github.com/mmmmmx1/dlink/blob/main/DIR-806/1/readme.md
CVE ID: CVE-2023-43129 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T16:26:46.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806 - https://github.com/mmmmmx1/dlink/blob/main/DIR-806/2/readme.md
CVE ID: CVE-2023-43130 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T16:21:31.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806 - https://github.com/mmmmmx1/dlink/tree/main/DIR-806/3
CVE ID: CVE-2023-43131 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T17:32:45.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51641
CVE ID: CVE-2023-43132 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T16:22:55.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain the hash of the administrator password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/szvone/vmqphp - https://gist.github.com/8FishMan/d42032b1cdcf401a9c27532aa72ccb37 - https://gist.github.com/8FishMan/a37417d1fd97046fb00eb11a257008a7
CVE ID: CVE-2023-43134 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T13:42:21.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/7R4C4R/CVE/blob/main/Netis-360R-AC1200/unauthorized%20access/readme.md
CVE ID: CVE-2023-43135 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:14:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/unauthorized%20access/Unauthorized%20Access%20Vulnerability.md
CVE ID: CVE-2023-43137 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:28:00.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/command%20injection/01/command%20injection01.md
CVE ID: CVE-2023-43138 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T13:46:50.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/7R4C4R/CVE/blob/main/TPLINK-TL-ER5120G/command%20injection/02/command%20injection02.md
CVE ID: CVE-2023-43139 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-17T13:16:18.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/validation.php components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/25/franfinance.html
CVE ID: CVE-2023-43141 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T18:01:02.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://totolink.com - https://github.com/Blue-And-White/vul/blob/main/Iot/TOTOLINK/1/readme.md
CVE ID: CVE-2023-43144 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T15:53:10.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/projectworldsofficial/Assets-management-system-in-php/issues/2
CVE ID: CVE-2023-43147 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T15:52:41.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an admin user via the Add Users Function, aka an index.php?controller=pjAdminUsers&action=pjActionCreate URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MinoTauro2020/CVE-2023-43147/
CVE ID: CVE-2023-43148 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T15:48:43.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MinoTauro2020/CVE-2023-43148
CVE ID: CVE-2023-43149 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T15:46:54.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker to add an admin user with role status. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MinoTauro2020/CVE-2023-43149
CVE ID: CVE-2023-43154 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T18:50:29.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ally-petitt/macs-cms-auth-bypass - https://cxsecurity.com/issue/WLB-2023090075
CVE ID: CVE-2023-43176 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T16:16:50.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://afterlogic.com - http://aurora.com - https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H&version=3.1 - https://sec.leonardini.dev/blog/cve-2023-43176-rce_aurora_files/
CVE ID: CVE-2023-43177 State: PUBLISHED Published: 2023-11-17T00:00:00 Last Updated: 2024-09-04T19:58:50.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/the-emmons/CVE-Disclosures/blob/main/Pending/CrushFTP-2023-1.md - https://convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered/
CVE ID: CVE-2023-43183 State: PUBLISHED Published: 2024-02-03T00:00:00.000Z Last Updated: 2025-11-04T18:17:18.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change the password of an admin and hijack their account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2024/Jan/43 - https://packetstormsecurity.com/files/176841/Reprise-License-Manager-15.1-Privilege-Escalation-File-Write.html
CVE ID: CVE-2023-43187 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T15:24:14.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jagat-singh-chaudhary/CVE/blob/main/CVE-2023-43187
CVE ID: CVE-2023-43191 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T13:15:27.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker, such as cookie theft Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/etn0tw/cmscve_test/blob/main/README.md
CVE ID: CVE-2023-43192 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:24:50.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/etn0tw/cve_sql/blob/main/jfinalcms_sql.md - https://github.com/etn0tw/cve_sql/blob/main/springbootcms_sql.md
CVE ID: CVE-2023-43193 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-17T13:15:51.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Submitty/Submitty/pull/8032 - https://fuchai.net/cve/CVE-2023-43193
CVE ID: CVE-2023-43194 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-17T13:15:23.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Submitty/Submitty/pull/8032 - https://fuchai.net/cve/CVE-2023-43194
CVE ID: CVE-2023-43196 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T13:34:28.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug4.md
CVE ID: CVE-2023-43197 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:12:15.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug1.md
CVE ID: CVE-2023-43198 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:09:21.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug5.md
CVE ID: CVE-2023-43199 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:05:15.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug6.md
CVE ID: CVE-2023-43200 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T13:56:33.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug3.md
CVE ID: CVE-2023-43201 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T13:54:55.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug2.md
CVE ID: CVE-2023-43202 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T18:08:24.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerability allows attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug4.md
CVE ID: CVE-2023-43203 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T18:08:53.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug1.md
CVE ID: CVE-2023-43204 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T18:08:04.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability allows attackers to execute arbitrary commands via the manual-time-string parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug2.md
CVE ID: CVE-2023-43206 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T18:07:52.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug6.md
CVE ID: CVE-2023-43207 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T18:06:13.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerability allows attackers to execute arbitrary commands via the configRestore parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug3.md