What’s Vulnerable › Vulnerabilities

CVE-2023-24762

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-13 · updated 2026-06-17
• Weakness: CWE-78

Description

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.

Affected products

• D-Link DIR-867: 1.30b07

References

• https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
• https://www.dlink.com/en/security-bulletin/
• https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
• https://www.dlink.com/en/security-bulletin/

Get alerted when CVE-2023-24762 or the next vulnerability affects your stack