CVE-2023-39637

CriticalCVSS 9.8

Published: 12/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.73%

75th percentile - higher than 75% of all known CVEs

Summary

A command injection vulnerability was discovered in the D-Link DIR-816 A2 router running firmware version 1.10 B05. The flaw resides in the /goform/Diagnosis component.

Risk Assessment

An attacker can remotely execute arbitrary system commands on the device, leading to full compromise of the router and potential network takeover.

Recommendation

Immediately update the router firmware to the latest available version. If no update is available, consider replacing the device with a supported model.

Original NVD description (English source)

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis.