CVE-2023-52043

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wireless Access Point Passwords (WPA-PSK) allowing an attacker to gain unauthorized network access via weak authentication controls.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
dlink	covr_1100	<= *
dlink	covr_1102	<= *
dlink	covr_1103	<= *
dlink	covr_1200	<= *

References

Timeline

Published: Apr 3, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-520449.8Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extensi CVE-2023-520456.1Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability.CVE-2023-520464.8Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payl CVE-2023-520478.8Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.CVE-2023-520484.7RuoYi v4.7.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/notice/.CVE-2023-52055.4The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_class' value in version CVE-2023-520595.4A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa CVE-2023-520604.3A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.CVE-2023-520649.8Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.CVE-2023-520667.2http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter.CVE-2023-520686.1kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.CVE-2023-520695.4kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.