CVE-2023-0127

A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.

Score

CVSS 3.1 7.8 High

Status

Modified - vulnreport@tenable.com

Published

2023-02-11

Last modified

2025-03-24

Weaknesses

CWE-77

Affected products

• Dwl-2600ap Firmware (Dlink)

References

• https://www.tenable.com/security/research/tra-2023-1