CVE-2023-5143
Last modified
CVE-2023-5143 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. EPSS estimates a 3.61% chance of exploitation in the next 30 days.
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name leads to an unknown weakness. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240239. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dar-7000 Firmware | <= 20151231 |
References
- https://vuldb.com/?ctiid.240239Permissions Required, Third Party Advisory
- https://vuldb.com/?id.240239Third Party Advisory
- https://vuldb.com/?ctiid.240239Permissions Required, Third Party Advisory
- https://vuldb.com/?id.240239Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-5143?
How severe is CVE-2023-5143?
How do I fix CVE-2023-5143?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-51424Improper Privilege Management vulnerability in Saleswonder T…9.8
- CVE-2023-51425Improper Privilege Management vulnerability in Jacques Malgr…9.8
- CVE-2023-51426 Some Honor products are affected by type confusion vulnerab…7.1
- CVE-2023-51427 Some Honor products are affected by type confusion vulnerab…7.1
- CVE-2023-51428 Some Honor products are affected by type confusion vulnerab…7.1
- CVE-2023-51429 Some Honor products are affected by incorrect privilege ass…5.5
- CVE-2023-51430 Some Honor products are affected by incorrect privilege ass…5.5
- CVE-2023-51431 Some Honor products are affected by incorrect privilege ass…5.5
- CVE-2023-51432 Some Honor products are affected by out of bounds read vuln…5.5
- CVE-2023-51433 Some Honor products are affected by incorrect privilege ass…5.5
- CVE-2023-51434 Some Honor products are affected by buffer overflow vulnera…7.8
- CVE-2023-51435 Some Honor products are affected by incorrect privilege ass…7.1
Are you affected by CVE-2023-5143?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
