CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.90% chance of exploitation in the next 30 days, 57th percentile

Published

2023-06-28

Updated

2024-11-27

Proof-of-concept exploits (1)

• 726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1

References

• CVE Record
• NVD entry

Related

• CVE-2022-20360
• CVE-2022-24637
• CVE-2023-26612
• CVE-2023-26613
• CVE-2023-26616
• CVE-2023-28252