vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247161 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| Link | Resource |
|---|---|
| https://github.com/c2dc/cve-reported/blob/main/CVE-2023-6580/CVE-2023-6580.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.247161 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.247161 | Third Party Advisory |
| https://github.com/c2dc/cve-reported/blob/main/CVE-2023-6580/CVE-2023-6580.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.247161 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.247161 | Third Party Advisory |
Configuration 1 (hide)
| AND |
|
21 Nov 2024, 08:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/c2dc/cve-reported/blob/main/CVE-2023-6580/CVE-2023-6580.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.247161 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.247161 - Third Party Advisory |
Published : 2023-12-07 22:15
Updated : 2024-11-21 08:44
NVD link : CVE-2023-6580
Mitre link : CVE-2023-6580
CVE.ORG link : CVE-2023-6580
JSON object : View
Deserialization of Untrusted Data