D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the shutdown_coreserver action. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-19572.
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-23-1511/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1511/ | Third Party Advisory |
Configurations
History
07 Aug 2025, 15:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1511/ - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:dlink:d-view_8:1.0.2.13:*:*:*:*:*:*:* | |
| First Time |
Dlink
Dlink d-view 8 |
03 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-08-07 15:55
NVD link : CVE-2023-44413
Mitre link : CVE-2023-44413
JSON object : View
Products Affected
dlink
- d-view_8
CWE
No CWE.