Remote Code Execution Vulnerability in D-Link DIR-815 Router
CVE-2023-51123

9.8CRITICAL

Key Information:

Vendor

D-Link
Status
Dir-815 Firmware
Vendor
CVE Published:
10 January 2024

What is CVE-2023-51123?

A vulnerability in the D-Link DIR-815 router's firmware version 1.01SSb08.bin enables remote code execution. The flaw arises from improper handling of crafted POST requests directed to the soapcgi_main function within the cgibin binary component. This imperfection poses a significant security threat, allowing an unauthorized attacker to execute arbitrary code on the affected device, thereby potentially compromising the integrity and confidentiality of the network.

References

https://github.com/WhereisRain/dir-815
https://github.com/WhereisRain/dir-815/blob/main/README.md

EPSS Score

38% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-51123 : Remote Code Execution Vulnerability in D-Link DIR-815 Router