CVE-2019-7297

An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.

• CWE-78

• http://www.securityfocus.com/bid/106815Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_1.mdExploit, Third Party Advisory
• http://www.securityfocus.com/bid/106815Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_1.mdExploit, Third Party Advisory

Published

Jan 31, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7290An access issue was addressed with additional sandbox restri…10
• CVE-2019-7291A denial of service issue was addressed with improved memory…6.5
• CVE-2019-7292A validation issue was addressed with improved logic. This i…6.5
• CVE-2019-7293A memory corruption issue was addressed with improved memory…5.5
• CVE-2019-7295typora through 0.9.63 has XSS, with resultant remote command…
• CVE-2019-7296typora through 0.9.64 has XSS, with resultant remote command…
• CVE-2019-7298An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-7299A stored cross-site scripting (XSS) vulnerability in the sub…
• CVE-2019-7300Artica Proxy 3.06.200056 allows remote attackers to execute …
• CVE-2019-7301Zen Load Balancer 3.10.1 allows remote authenticated admin u…
• CVE-2019-7303A vulnerability in the seccomp filters of Canonical snapd be…7.5
• CVE-2019-7304Canonical snapd before version 2.37.1 incorrectly performed …9.8