726232111/VulIoT

Releases0

Stars2

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-26612 ↗	Jun 29, 2023Thursday, 29 June 2023, 16:15	9.8 CRITICAL	—
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.
CVE-2023-26613 ↗	Jun 29, 2023Thursday, 29 June 2023, 16:15	9.8 CRITICAL	—
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL.
CVE-2023-26616 ↗	Jun 29, 2023Thursday, 29 June 2023, 16:15	9.8 CRITICAL	—
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.
CVE-2023-26615 ↗	Jun 28, 2023Wednesday, 28 June 2023, 15:15	7.5 HIGH	—
D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password.
CVE-2023-29665 ↗	Apr 17, 2023Monday, 17 April 2023, 16:15	9.8 CRITICAL	—
D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.