CVE-2023-7163

Published Dec 28, 2023

Last updated 10 months ago

CVSS critical 9.8

Overview

Description: A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the execution of tasks on other probes.
Source: vulnreport@tenable.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
vulnreport@tenable.com: CWE-20

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dlink:d-view_8:2.0.2.89:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A91C8832-E4F4-47AD-986A-2C63EEBF9B6C"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References