Search/CVE-2018-10823
● CVE — High

CVE-2018-10823

VendordlinkProductdwr-111 firmware, dwr-116 firmware, dwr-512 firmware, dwr-912 firmwareDiscoveredOct 17, 2018UpdatedNov 21, 2024

An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
77.7%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
5 relationships
Timeline
disclosure → media coverage
Oct 17, 2018
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024