CVE-2023-4711: D-Link DAR-8000-10 decodmail.php os command injection
A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-238574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4711?
The severity of CVE-2023-4711 is high, with a severity value of 8.1.
What is the affected software of CVE-2023-4711?
The affected software of CVE-2023-4711 is D-Link DAR-8000-10 firmware up to version 20230819.
What is the vulnerability type of CVE-2023-4711?
The vulnerability type of CVE-2023-4711 is OS command injection.
Is CVE-2023-4711 exploitable remotely?
Yes, CVE-2023-4711 can be exploited remotely.
How can I mitigate the CVE-2023-4711 vulnerability?
To mitigate the CVE-2023-4711 vulnerability, update the D-Link DAR-8000-10 firmware to a version after 20230819.