critical9.8
CVE-2022-28573
D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.
Impact
D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the system_time_timezone parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dir-823 Pro Firmware | Version 1.0.2 |