CVE-2023-43207

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-09-20 · updated 2026-06-17
Weakness: CWE-77

Description

D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerability allows attackers to execute arbitrary commands via the configRestore parameter.

Affected products

Dlink Dwl-6610Ap Firmware: 4.3.0.8b003c

References

https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug3.md
https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug3.md

Get alerted when CVE-2023-43207 or the next vulnerability affects your stack