Vulnerability · Published Oct 10, 2023 · Assigned by mitre

CVE-2023-44959

High 8.8

In plain English

A high-severity command injection in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 22.8% (higher than 98% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)22.8%top 2.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/FzBacon/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection/blob/master/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection.md#cve-2023-27216_d-link_dsl-3782_router_command_injection