CVE-2023-43202

Summary

CVE-2023-43202 is a newly discovered command injection vulnerability affecting D-LINK DWL-6610 routers with firmware version FW_v_4.3.0.8B003C. This issue resides in the pcap_download_handler function, which enables attackers to execute arbitrary commands by exploiting the update.device.packet-capture.tftp-file-name parameter. Successful exploitation could result in unauthorized access, data theft, or device takeover. Users are advised to apply the forthcoming patch or upgrade to a secure firmware version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.