CVE-2023-32168: D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability
D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability.
The specific flaw exists within the showUser method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-19534.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32168?
CVE-2023-32168 has been classified with a critical severity level due to its potential for privilege escalation.
How do I fix CVE-2023-32168?
To fix CVE-2023-32168, update the D-Link D-View software to the latest version released by D-Link.
Who is affected by CVE-2023-32168?
CVE-2023-32168 affects installations of D-Link D-View that are running vulnerable versions of the software.
What type of vulnerability is represented by CVE-2023-32168?
CVE-2023-32168 represents an improper authorization privilege escalation vulnerability.
Can CVE-2023-32168 be exploited remotely?
Yes, CVE-2023-32168 can be exploited remotely, but requires authentication to escalate privileges.