D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
2024-11-05T15:15:26.037
2025-05-07T14:21:36.733
Analyzed
CVSSv3.1: 8.0 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | dlink | dir-823g_firmware | 1.0.2b05 | Yes |
Hardware | dlink | dir-823g | - | No |