CVE-2023-33625

Severity CVSS v4.0:
Pending analysis
Type:
CWE-77 Command Injection
Publication date:
12/06/2023
Last modified:
07/11/2023

Description

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:dlink:dir-600_firmware:2.18:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-600:b5:*:*:*:*:*:*:*