D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the coreservice_action_script action. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-19573.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-23-1512/ | Third Party Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-23-1512/ | Third Party Advisory |
Configurations
History
07 Aug 2025, 15:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dlink:d-view_8:1.0.2.13:*:*:*:*:*:*:* | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-23-1512/ - Third Party Advisory | |
| First Time |
Dlink
Dlink d-view 8 |
03 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-03 03:15
Updated : 2025-08-07 15:58
NVD link : CVE-2023-44414
Mitre link : CVE-2023-44414
JSON object : View
Products Affected
dlink
- d-view_8
CWE
No CWE.