CVE-2026-4193

D-Link DIR-823G goahead UpdateClientInfo access control

CVSS 6.9 MEDIUMEPSS 0.8%CWE-266 CWE-284

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.9EPSS 0.8%KEV nãoPoC —Patch —

Ciclo de vida

15 mar 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function GetDDNSSettings/GetDeviceDomainName/GetDeviceSettings/GetDMZSettings/GetFirewallSettings/GetGuestNetworkSettings/GetLanWanConflictInfo/GetLocalMacAddress/GetNetworkSettings/GetQoSSettings/GetRouterInformationSettings/GetRouterLanSettings/GetWanSettings/SetAccessCtlList/SetAccessCtlSwitch/SetDeviceSettings/SetGuestWLanSettings/SetIPv4FirewallSettings/SetNetworkSettings/SetNetworkTomographySettings/SetNTPServerSettings/SetRouterLanSettings/SetStaticClientInfo/SetStaticRouteSettings/SetWLanRadioSecurity/SetWPSSettings/UpdateClientInfo of the component goahead. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Productos afectados

D-Link · DIR-823G

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_91/91.md https://github.com/wudipjq/my_vuln/blob/main/D-Link7/vuln_92/92.md https://vuldb.com/?ctiid.351105 https://vuldb.com/?id.351105 https://vuldb.com/?submit.769835 https://vuldb.com/?submit.769836 https://vuldb.com/?submit.769837 https://vuldb.com/?submit.769838 https://vuldb.com/?submit.769839 https://vuldb.com/?submit.769841 https://www.dlink.com/