Critical severity · published Dec 28, 2023
CVE-2023-7163
D-Link D-View 8 Unauthenticated Probe-Core Server Communication
9.8
CVSS
1.7%
EPSS
No
On KEV
Description
A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the execution of tasks on other probes.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
D8
D-View 8 · D-Link
through 2.0.2.89 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-7163
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-7163
Exploit
https://tenable.com/security/research/tra-2023-43
More from D-View 8
9.8
CVE-2023-5074
Authentication Bypass in D-Link D-View 8
8.8
CVE-2026-23754
D-Link D-View 8 IDOR Allows Credential Disclosure and Account Takeover
7.3
CVE-2026-23755
D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path