D-Link D-View Missing Authentication Denial-of-Service Vulnerability

CVE-2023-44413

Summary

A vulnerability exists in D-Link D-View related to the shutdown_coreserver action, where a lack of proper authentication allows attackers to gain unauthorized access. This flaw can be exploited remotely, leading to a denial-of-service condition. By leveraging this vulnerability, an attacker can interfere with the normal operation of the D-View system without needing to authenticate, making it a significant security concern for organizations relying on this platform.

References