CVE-2023-33625

CriticalCVSS 9.8

Published: 12/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

33.15%

98th percentile - higher than 98% of all known CVEs

Summary

A command injection vulnerability was discovered in D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 via the ST parameter in the lxmldbc_system() function.

Risk Assessment

This vulnerability could allow an attacker to execute arbitrary system commands, posing a serious threat to the security of the device and the network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.