CVE-2023-7163

D-Link D-View 8 Unauthenticated Probe-Core Server Communication

CRITICAL 9.8EPSS 1.7%

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the execution of tasks on other probes.

Affected: D-Link · D-View 8
CVSS v3.1 NVD: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1 TENABLE: 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 1.67% chance of exploitation in the next 30 days, 76th percentile
Published: 2023-12-28
Updated: 2024-08-02

Proof-of-concept exploits (1)

https://tenable.com/security/research/tra-2023-43

References

CVE Record
NVD entry