← Database

CVE-2023-24762

CRITICAL CVSS: 9.8 Published: 2023-03-13 Modified: 2026-06-17

Description

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.

Affected Platforms

Dlink Dir-867Dlink Dir-867 Firmware

Weakness Type

CWE-78, CWE-78

References