CVE-2023-51123

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 10, 2024
Updated: Jan 22, 2024

Summary

CVE-2023-51123 is a critical vulnerability discovered in D-Link dir815 v.1.01SSb08.bin. It allows a remote attacker to execute arbitrary code by sending a specially crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component. The vulnerability has a base score of 9.8 and poses a high risk to organizations as it can result in unauthorized code execution, compromising the confidentiality, integrity, and availability of the affected system. The exploit does not require any privileges or user interaction and can be launched over a network. Organizations using D-Link dir815 v.1.01SSb08.bin should apply appropriate security patches or updates to remediate this vulnerability promptly.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-51123 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options