CVE-2023-32222

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
D-LinkDSL-G256DG firmware version vBZ_1.00.27>= Manufacturer recommends replacing the unit., < All version*
d-linkdsl-g256dg1.00.27

References

Timeline

Published
Jun 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-322238.8D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.CVE-2023-322249.8D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication AttemptsCVE-2023-322257.2Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type -  A malicious user with administrative privileges may be able to upload CVE-2023-322266.5Sysaid - CWE-552: Files or Directories Accessible to External Parties -  Authenticated users may exfiltrate files from the server via an uCVE-2023-322279.8Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded CredentialsCVE-2023-322284.6A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last CVE-2023-322296.5Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanenCVE-2023-32237.5A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This maCVE-2023-322307.5An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to causCVE-2023-322319.9An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. During installation, binaries gets executed out of a suCVE-2023-322329.9An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic bCVE-2023-322337.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary
CVE-2023-32222: Critical severity, CVSS 9.8 | Vulnix