CVE-2023-49004

An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter

published December 19, 2023

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

⚡ A crafty script could turn your D-Link DIR-850L into an attacker's playground! This vulnerability allows remote code execution via the en parameter, making it a sneaky threat! 🔥 Think of it like an unauthorized guest slipping a fake reservation under the door at a hotel, making themselves a VIP while the staff is none the wiser. With the right crafted script, an attacker can gain control without even being on the premises! If exploited, an attacker could execute arbitrary code on your router, potentially gaining control over your home network. This would mean unauthorized access to sensitive data and even the ability to manipulate your internet traffic, creating a seriously compromised situation!

Put simply

Think of it like an unauthorized guest slipping a fake reservation under the door at a hotel, making themselves a VIP while the staff is none the wiser. With the right crafted script, an attacker can gain control without even being on the premises! This vulnerability in the D-Link DIR-850L allows attackers to execute arbitrary code by sending a specifically crafted script to the en parameter, bypassing security measures that should typically protect against such intrusions.

What to do

If exploited, an attacker could execute arbitrary code on your router, potentially gaining control over your home network. This would mean unauthorized access to sensitive data and even the ability to manipulate your internet traffic, creating a seriously compromised situation! To protect yourself, ensure that your firmware is updated to the latest version available from D-Link. Regularly check for updates and consider changing your router's default settings to enhance security. 🛡️ You've got this! With these steps, you'll keep your network safe and sound! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01862 · 79.1th percentile
Published
2023-12-19T00:00Z
EPSS history
Timeline
  • 19 DEC 00:00Z
    An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter
    cvelistv5