CVE-2023-41603

Summary

CVE-2023-41603 is a vulnerability affecting D-Link R15 devices before version 1.08.02. The issue involves a lack of firewall restrictions for IPv6 traffic. This weakness exposes any services running on the device that unintentionally listen via IPv6, enabling attackers to access these services arbitrarily. This vulnerability poses a significant risk as IPv6 traffic often goes unfiltered in many networks, increasing the risk of unauthorized access and potential data breaches. Devices should be updated to the latest firmware to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.