CVE-2023-27216

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
dlinkdsl-3782_firmware
1.03
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://d-link.com
https://lessonsec.com/cve/cve-2023-27216/
https://www.dlink.com/en/security-bulletin/
http://d-link.com
https://lessonsec.com/cve/cve-2023-27216/
https://www.dlink.com/en/security-bulletin/