ZDI-23-1511: (0Day) D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the shutdowncoreserver action. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.
Other sources
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2023-44413.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1511?
ZDI-23-1511 is classified as a high severity vulnerability due to its potential to create a denial-of-service condition.
How do I fix ZDI-23-1511?
To mitigate ZDI-23-1511, apply the latest security patch provided by D-Link for the D-View software.
What impact does ZDI-23-1511 have on users?
ZDI-23-1511 allows remote attackers to disrupt services without authentication, leading to potential downtime for users.
Is authentication required to exploit ZDI-23-1511?
No, ZDI-23-1511 does not require authentication for remote exploitation.
What affected versions are there for ZDI-23-1511?
ZDI-23-1511 impacts all affected installations of D-Link D-View that have not implemented the recommended patch.