← Vulnerability feed

Vulnerability record · CVE-2023-24762 · published 13 March 2023

CVE-2023-24762: Dlink dir-867 firmware os command injection vulnerability

Dlink · Dir 867 Firmware

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.

9.8 CVSS 3.1 Critical EPSS 2.5% · top 15.8% CWE-78 · OS command injection
9.8CVSS 3.1 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
https://www.dlink.com/en/security-bulletin/ Product
https://hackmd.io/%40uuXne2y3RjOdpWM87fw6_A/HyPK04zho
https://www.dlink.com/en/security-bulletin/ Product

Track CVE-2023-24762 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2022-41140Dlink dir-882-us firmware stack-based buffer overflow vulnerabilityThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication i…EPSS 1.1%8.8CVE-2020-8863D-Link DIR router HNAP authentication bypass allows code executionD-Link DIR-867, DIR-878 and DIR-882 routers running firmware 1.10B04 mishandle HNAP login requests, failing to properly implement the authentication …EPSS 77%analysed8.8CVE-2020-8864D-Link DIR router HNAP authentication bypass via empty passwordD-Link DIR-867, DIR-878 and DIR-882 routers running firmware 1.10B04 mishandle empty passwords in HNAP login requests, allowing authentication to be …EPSS 80%analysed7.8CVE-2022-1262Dlink dir-1360 firmware os command injection vulnerabilityA command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary comm…EPSS 2.2%7.4CVE-2025-6334Dlink dir-867 firmware memory buffer overflow vulnerabilityA vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Que…EPSS 0.95%8.8CVE-2026-53266Linux kernel ebtables SNAT out-of-bounds write in ARP rewriteThe ebtables SNAT target rewrites the ARP sender hardware address via skb_store_bits() without first making that range writable. When the ARP SHA byt…KEVEPSS 0.65%analysed8.8CVE-2026-87491Google Chrome V8 out-of-bounds write enables sandbox code executionChrome before 153.0.8010.36 contains an out-of-bounds write in the V8 JavaScript engine. A crafted HTML page can trigger the memory corruption, and b…KEVEPSS 3.1%analysed9.8CVE-2025-25249Fortinet FortiOS and FortiSwitchManager heap buffer overflow via crafted packetsA heap-based buffer overflow (CWE-122/CWE-787) in Fortinet FortiOS 6.4 through 7.6.3 and FortiSwitchManager 7.0 through 7.2.6 lets an unauthenticated…KEVEPSS 3.9%analysed

Source: NIST National Vulnerability Database (record CVE-2023-24762), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.