CVE-2023-34800

D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main

Critical · published June 15, 2023

CVSS v3.1
9.8
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

🚨 A crafty command injection vulnerability in D-Link Go-RT-AC750 could let attackers execute arbitrary commands like it's a game of digital charades gone wrong! 🔥 Think of it like a restaurant where the waiter accepts any dish order without verifying the chef's approval — you could end up with anything on the menu, including something hazardous! If exploited, an attacker could gain control over the router, allowing them to manipulate network traffic, snoop on your devices, or even create backdoors for future access. The potential consequences are absolutely devastating, as it could compromise your entire home network security!

Put simply

Think of it like a restaurant where the waiter accepts any dish order without verifying the chef's approval — you could end up with anything on the menu, including something hazardous! This vulnerability allows an attacker to inject malicious commands into the service parameter at genacgi_main, effectively bypassing security checks. This means unauthorized commands could be executed on the device, posing a significant risk to users.

What to do

If exploited, an attacker could gain control over the router, allowing them to manipulate network traffic, snoop on your devices, or even create backdoors for future access. The potential consequences are absolutely devastating, as it could compromise your entire home network security! To safeguard your network, update the D-Link Go-RT-AC750 to the latest firmware version immediately. Regularly check for updates and review your device settings to ensure optimal security practices. You've got this! Patch up and secure your network like the hero you are! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.28420 · 98.1th percentile
Published
2023-06-15T00:00Z
EPSS history
Timeline
  • 15 JUN 00:00Z
    D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main
    cvelistv5