CVE-2023-25279: Command Injection
Published Mar 13, 2023
·Updated
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload.
Affected Software
4 affected components
Dlink Dir-820l Firmware=105b03
Dlink Dir-820l=a1
All of the following
Dlink Dir-820l Firmware=1.05b03
Dlink Dir-820l
Event History
Mar 13, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-25279?
CVE-2023-25279 is an OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 that allows attackers to escalate privileges to root via a crafted payload.
2
How severe is CVE-2023-25279?
CVE-2023-25279 has a severity rating of 9.8, which is classified as critical.
3
How does CVE-2023-25279 affect D-Link DIR-820L firmware version 105b03?
CVE-2023-25279 affects D-Link DIR-820L firmware version 105b03 by allowing attackers to escalate privileges to root through a command injection vulnerability.
4
Is D-Link DIR-820L A1 vulnerable to CVE-2023-25279?
No, D-Link DIR-820L A1 is not vulnerable to CVE-2023-25279.
5
How can I fix the OS Command injection vulnerability in D-Link DIR820LA1_FW105B03?
To fix the OS Command injection vulnerability in D-Link DIR820LA1_FW105B03, it is recommended to apply the latest firmware update provided by D-Link.