CVE-2023-44414: (0Day) D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability
D-Link D-View coreserviceactionscript Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the coreserviceactionscript action. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-19573.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44414?
CVE-2023-44414 is considered critical due to the potential for remote code execution without authentication.
How do I fix CVE-2023-44414?
To fix CVE-2023-44414, update your D-Link D-View software to the latest patched version provided by D-Link.
Which D-Link products are affected by CVE-2023-44414?
CVE-2023-44414 affects installations of D-Link D-View software.
Can CVE-2023-44414 be exploited without authentication?
Yes, CVE-2023-44414 can be exploited by remote attackers without requiring any authentication.
What type of vulnerability is CVE-2023-44414?
CVE-2023-44414 is classified as a remote code execution vulnerability.