CVE-2023-45208
Vendor not yet named
No fix listed · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
Higher than 77% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names containing single quotes (in the range of the repeater) can result in a denial of service.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Dlink
- Published
- October 2023
Coverage1 article · 1 outlet
First in our coverage: Krebs on Security, 25 Sep.
- Former US Soldier Gets 70 Months for Telecom Data Hacking SchemeKrebs on Security · first in our coverage
New articles also arrive in the RSS feed.