CVE-2023-51506.3MediumCWE-434

CVE-2023-5150: D-Link DAR-7000/DAR-8000 web.php unrestricted upload

D-Link · DAR-7000

Affected: D-Link DAR-7000 · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

22.7%probability of exploitation in the next 30 days

97th percentile

050100

Higher than 97% of scored CVEs

6.3MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-240246 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Affected products2

From the CVE record. A product or version that is not listed is unknown, not unaffected.

D-Link · DAR-700020151231
D-Link · DAR-800020151231

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Unrestricted File Upload · File and Path Handling
Vendor: D-Link
Published: September 2023
Band: Likely to be exploited (10% or more), September 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-5150 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.