CVE-2023-51123

Critical · 9.8

CVSS

9.8

EPSS

24.4%

Published

Jan 10, 2024

CISA due date

—

The record

An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.

Affected packages

Ecosystem	Package	Introduced	Fixed