cve/2023/CVE-2023-51123.md

CVE-2023-51123

Description

An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.

POC

Reference

• https://github.com/WhereisRain/dir-815
• https://github.com/WhereisRain/dir-815/blob/main/README.md

Github

• https://github.com/fkie-cad/nvd-json-data-feeds