CVE-2020-25368 | BDVDB-2026-163752 Detail

Description#

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.dlink.com/en/security-bulletin/
https://github.com/sek1th/iot/blob/master/dir-823g_2.md

Exploit#

No public exploit known

History#

Version 12021-11-04Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.