D-Link DAR-7000/DAR-8000 ଯେପର୍ଯ୍ୟନ୍ତ 20151231 /Tool/uploadfile.php file_upload ବିସ୍ତାରିତ ଅଧିକାର

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame D-Link DAR-7000 and DAR-8000 ଯେପର୍ଯ୍ୟନ୍ତ 20151231 keessatti argameera. Miidhaan irra gahe is hojii hin beekamne faayilii /Tool/uploadfile.php keessa. Dhugumatti jijjiirraa irratti raawwatame file_upload gara ବିସ୍ତାରିତ ଅଧିକାର geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-434 si geessa. Beekumsi kun yeroo 09/24/2023 ifoomsifameera. Odeeffannoon kun buufachuuf github.com irratti dhiyaateera. Dogoggorri kun maqaa CVE-2023-5148 jedhuun tajaajilama. Weerara fageenya irraa jalqabuun ni danda'ama. Odeeffannoon teeknikaa ni argama. Akka dabalataan, meeshaa balaa kana fayyadamuuf argama. Qorannoo miidhaa (exploit) beeksifamee jira, namoonni itti fayyadamuu danda'u. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee murtaa’eera. Exploit kana github.com irraa buufachuu ni dandeessa. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $5k-$25k jedhamee tilmaamame. Qabiyyee miidhamte kana dhoorkuu akka filatamaa ta'e ni gorfama. Once again VulDB remains the best source for vulnerability data.

6 ଆଡାପ୍ଟେସନ୍ · 98 ପଏଣ୍ଟ

ଫିଲ୍ଡଅଦ୍ୟତନ 1/5
09/24/2023 06:05 PM		ଅଦ୍ୟତନ 2/5
09/24/2023 06:12 PM		ଅଦ୍ୟତନ 3/5
10/14/2023 07:04 PM		ଅଦ୍ୟତନ 4/5
10/14/2023 07:11 PM		ଅଦ୍ୟତନ 5/5
08/02/2024 11:45 AM
software_vendorD-LinkD-LinkD-LinkD-LinkD-Link
software_nameDAR-7000/DAR-8000DAR-7000/DAR-8000DAR-7000/DAR-8000DAR-7000/DAR-8000DAR-7000/DAR-8000
software_version<=20151231<=20151231<=20151231<=20151231<=20151231
software_file/Tool/uploadfile.php/Tool/uploadfile.php/Tool/uploadfile.php/Tool/uploadfile.php/Tool/uploadfile.php
software_argumentfile_uploadfile_uploadfile_uploadfile_uploadfile_upload
vulnerability_cweCWE-434 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-434 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-434 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-434 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-434 (ବିସ୍ତାରିତ ଅଧିକାର)
vulnerability_risk22222
cvss3_vuldb_avNNNNN
cvss3_vuldb_acLLLLL
cvss3_vuldb_prLLLLL
cvss3_vuldb_uiNNNNN
cvss3_vuldb_sUUUUU
cvss3_vuldb_cLLLLL
cvss3_vuldb_iLLLLL
cvss3_vuldb_aLLLLL
cvss3_vuldb_ePPPPP
cvss3_vuldb_rlUUUUU
cvss3_vuldb_rcCCCCC
advisory_urlhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.md
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.md
countermeasure_nameଅକ୍ଷମ କରନ୍ତୁଅକ୍ଷମ କରନ୍ତୁଅକ୍ଷମ କରନ୍ତୁଅକ୍ଷମ କରନ୍ତୁଅକ୍ଷମ କରନ୍ତୁ
source_cveCVE-2023-5148CVE-2023-5148CVE-2023-5148CVE-2023-5148CVE-2023-5148
cna_responsibleVulDBVulDBVulDBVulDBVulDB
response_summaryVendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
cna_eol11111
advisory_date1695506400 (09/24/2023)1695506400 (09/24/2023)1695506400 (09/24/2023)1695506400 (09/24/2023)1695506400 (09/24/2023)
cvss2_vuldb_avNNNNN
cvss2_vuldb_acLLLLL
cvss2_vuldb_ciPPPPP
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiPPPPP
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcCCCCC
cvss2_vuldb_rlUUUUU
cvss2_vuldb_auSSSSS
cvss2_vuldb_basescore6.56.56.56.56.5
cvss2_vuldb_tempscore5.95.95.95.95.9
cvss3_vuldb_basescore6.36.36.36.36.3
cvss3_vuldb_tempscore6.06.06.06.06.0
cvss3_meta_basescore6.36.36.37.17.1
cvss3_meta_tempscore6.06.06.07.07.0
price_0day$5k-$25k$5k-$25k$5k-$25k$5k-$25k$5k-$25k
source_mischttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.mdhttps://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.md
advisory_confirm_urlhttps://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
cve_assigned1695506400 (09/24/2023)1695506400 (09/24/2023)1695506400 (09/24/2023)
cve_nvd_summary** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
cvss3_nvd_avNN
cvss3_nvd_acLL
cvss3_nvd_prLL
cvss3_nvd_uiNN
cvss3_nvd_sUU
cvss3_nvd_cHH
cvss3_nvd_iHH
cvss3_nvd_aHH
cvss2_nvd_avNN
cvss2_nvd_acLL
cvss2_nvd_auSS
cvss2_nvd_ciPP
cvss2_nvd_iiPP
cvss2_nvd_aiPP
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prLL
cvss3_cna_uiNN
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aLL
cve_cnaVulDBVulDB
cvss2_nvd_basescore6.56.5
cvss3_nvd_basescore8.88.8
cvss3_cna_basescore6.36.3
cve_nvd_summaryes** NO SOPORTADO CUANDO ESTÁ ASIGNADO ** ** NO SOPORTADO CUANDO ESTÁ ASIGNADO ** Se encontró una vulnerabilidad en D-Link DAR-7000 y DAR-8000 hasta 20151231. Ha sido declarada como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo /Tool/uploadfile.php. La manipulación del argumento file_upload conduce a una carga sin restricciones. El ataque se puede iniciar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. El identificador de esta vulnerabilidad es VDB-240244. NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor. NOTA: Se contactó primeramente con el proveedor y se confirmó de inmediato que el producto ha llegado al final de su vida útil. Debería retirarse y reemplazarse.
cvss2_cna_avN
cvss2_cna_acL
cvss2_cna_auS
cvss2_cna_ciP
cvss2_cna_iiP
cvss2_cna_aiP
cvss2_cna_basescore6.5
cvss4_vuldb_avN
cvss4_vuldb_acL
cvss4_vuldb_prL
cvss4_vuldb_uiN
cvss4_vuldb_vcL
cvss4_vuldb_viL
cvss4_vuldb_vaL
cvss4_vuldb_eP
cvss4_vuldb_atN
cvss4_vuldb_scN
cvss4_vuldb_siN
cvss4_vuldb_saN
cvss4_vuldb_bscore5.3
cvss4_vuldb_btscore2.1

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!