CVE-2023-43202

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-09-20 · updated 2026-06-17
Weakness: CWE-77

Description

D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerability allows attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter.

Affected products

Dlink Dwl-6610Ap Firmware: 4.3.0.8b003c

References

https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug4.md
https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug4.md

Get alerted when CVE-2023-43202 or the next vulnerability affects your stack