CVE-2023-5143

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name leads to an unknown weakness. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240239. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
D-Link	DAR-7000	20151231

References

https://github.com/ggg48966/cve/blob/main/D-LINK%20-DAR-7000_rce_%20webmailattach.mdThird Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354Vendor Advisory
https://vuldb.com/?ctiid.240239Permissions Required, Third Party Advisory
https://vuldb.com/?id.240239Third Party Advisory
https://github.com/ggg48966/cve/blob/main/D-LINK%20-DAR-7000_rce_%20webmailattach.mdThird Party Advisory
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354Vendor Advisory
https://vuldb.com/?ctiid.240239Permissions Required, Third Party Advisory
https://vuldb.com/?id.240239Third Party Advisory

Timeline

Published: Sep 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-514305.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514315.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service excepti CVE-2023-514325.5Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.CVE-2023-514335.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514347.8Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.CVE-2023-514357.1Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514365.9Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote authenticated attacker CVE-2023-514377.4Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token t CVE-2023-514389.8A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPC CVE-2023-514397.8A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcen CVE-2023-51448.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231.CVE-2023-514407.5A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All