CVE-2023-51486.3MediumCWE-434

CVE-2023-5148: D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

D-Link · DAR-7000

Affected: D-Link DAR-7000 · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

30.5%probability of exploitation in the next 30 days

98th percentile

050100

Higher than 98% of scored CVEs

6.3MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

D-Link · DAR-700020151231
D-Link · DAR-800020151231

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Unrestricted File Upload · File and Path Handling
Vendor: D-Link
Published: September 2023
Band: Likely to be exploited (10% or more), September 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-5148 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.