CVE Catalog

CVE-2023-33781

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
32.03%

98th percentile - higher than 98% of all known CVEs

Summary

An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

Risk Assessment

An attacker can gain full control over the device, compromising network confidentiality and integrity, and potentially using the router as an entry point for further attacks.

Recommendation

Immediately update the firmware of the D-Link DIR-842V2 device to the latest available version and avoid importing files from untrusted sources.

Original NVD description (English source)

An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS