CVE-2023-4711

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-238574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-471105.3blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy. An a CVE-2023-471113.7ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a `Lockout Policy` with a maximum amount CVE-2023-471124.3Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs us CVE-2023-471137.3BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijackin CVE-2023-471146.1Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and CVE-2023-471155.4Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) vulnerability that co CVE-2023-471165.3Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tes CVE-2023-471177.5Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users CVE-2023-471189.8ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap CVE-2023-471196.1Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-47129.8A vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unkn CVE-2023-471207.5Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,bet