DF
Product
Dir-823g Firmware
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 0Low 0
Watch
Add Dir-823g Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-7297 | 9.8 | Jan 31 | An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03 Affected: through 1.02b03 |
| CVE-2018-17881 | 9.8 | Oct 3 | On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change Affected: All versions, or not specified |
| CVE-2018-17787 | 9.8 | Oct 2 | On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system"… Affected: All versions, or not specified |
| CVE-2018-17786 | 9.8 | Oct 2 | On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to… Affected: All versions, or not specified |
| CVE-2018-17880 | 7.5 | Oct 3 | On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot Affected: All versions, or not specified |
Showing 5
