Description (CNA)
A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| D-Link / DIR-823X | affected 240126; affected 240802; affected 250416 |
CWE
CWE-77, CWE-74
References
- https://vuldb.com/?id.324662
- https://vuldb.com/?ctiid.324662
- https://vuldb.com/?submit.650792
- https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.md
- https://pan.baidu.com/s/1dWnXEa58P0KHw53L9U_PoQ
- https://www.dlink.com/
ADP enrichment
No English description supplied.