D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability.
The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user.
. Was ZDI-CAN-19535.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ | Third Party Advisory |
Configurations
History
07 Aug 2025, 15:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dlink:d-view_8:1.0.2.13:*:*:*:*:*:*:* | |
| First Time |
Dlink
Dlink d-view 8 |
|
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ - Third Party Advisory |
18 Sep 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-19535. |
03 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-08-07 15:57
NVD link : CVE-2023-44410
Mitre link : CVE-2023-44410
JSON object : View
Products Affected
dlink
- d-view_8
CWE
No CWE.