CVE-2023-24762: Command Injection
Published Mar 13, 2023
·Updated
OS Command injection vulnerability in D-Link DIR-867 DIR867FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.
Affected Software
4 affected components
Dlink Dir-867 Firmware=1.30b07
Dlink Dir-867
All of the following
Dlink Dir-867 Firmware=1.30b07
Dlink Dir-867
Event History
Mar 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-24762?
CVE-2023-24762 is an OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07.
2
How does CVE-2023-24762 work?
CVE-2023-24762 allows attackers to execute arbitrary commands by exploiting a command injection vulnerability in the SetVirtualServerSettings function to HNAP1.
3
What is the severity of CVE-2023-24762?
CVE-2023-24762 has a severity rating of critical (9.8).
4
Which software is affected by CVE-2023-24762?
The D-Link DIR-867 firmware version 1.30b07 is affected by CVE-2023-24762.
5
How can I fix CVE-2023-24762?
To fix CVE-2023-24762, it is recommended to apply the latest firmware update provided by D-Link.