CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03

published July 1, 2019

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07705 · 94.6th percentile
Published
2019-07-01T14:47Z
EPSS history
Timeline
  • 01 JUL 14:47Z
    An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03
    cvelistv5