CVE-2023-43865

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
n/an/an/a
d-linkdir-619lb1.2.02

References

Timeline

Published
Sep 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-438667.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function.CVE-2023-438677.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function.CVE-2023-438687.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function.CVE-2023-438699.8D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function.CVE-2023-43877.1A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in tCVE-2023-438709.8When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batcCVE-2023-438715.4A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).CVE-2023-438725.4A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).CVE-2023-438735.4A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to theCVE-2023-438745.4Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted scriptCVE-2023-438756.1Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web CVE-2023-438765.4A Cross-Site Scripting (XSS) vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a cra
CVE-2023-43865: High severity, CVSS 7.5 | Vulnix