CVE-2023-5146

Summary

CVE-2023-5146 is a critical vulnerability discovered in D-Link DAR-7000 and DAR-8000 devices up to version 20151231. The issue lies in the unspecified functionality of the file /sysmanage/updatelib.php. A manipulated argument named file_upload results in an unrestricted upload, which can be exploited remotely. The vulnerability has been disclosed to the public, and the attacker can take advantage of it. This vulnerability only affects outdated and unsupported devices, as confirmed by D-Link, who have urged users to retire and replace them. VDB-240242 is the assigned identifier to this security flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.