D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password.
References
| Link | Resource |
|---|---|
| https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1 | Exploit Third Party Advisory |
| https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/SetMultipleActions | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Jul 2023, 18:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/SetMultipleActions - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Dlink dir-823g
Dlink Dlink dir-823g Firmware |
|
| CPE | cpe:2.3:o:dlink:dir-823g_firmware:1.02b05:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-823g:-:*:*:*:*:*:*:* |
|
| CWE | CWE-640 |
28 Jun 2023, 15:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-28 15:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-26615
Mitre link : CVE-2023-26615
CVE.ORG link : CVE-2023-26615
JSON object : View
Products Affected
dlink
- dir-823g_firmware
- dir-823g
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password