CVE-2023-33782

HighCVSS 8.8

Published: 07/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

36.64%

98th percentile - higher than 98% of all known CVEs

Summary

A command injection vulnerability was discovered in the D-Link DIR-842V2 v1.0.3 within the iperf3 diagnostics function. An attacker can remotely execute arbitrary system commands.

Risk Assessment

The risk involves potential unauthorized control over the device, leading to network compromise and access to sensitive data.

Recommendation

Immediately update the firmware to the latest version and restrict access to diagnostic functions to trusted users only.

Original NVD description (English source)

D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.