Rewterz Threat Update – Flipper Zero and Android Bluetooth Spam Attacks Discovered by ‘Wall of Flippers’
December 25, 2023Rewterz Threat Advisory – CVE-2023-34064 – VMware Workspace One Launcher Vulnerability
December 25, 2023Rewterz Threat Update – Flipper Zero and Android Bluetooth Spam Attacks Discovered by ‘Wall of Flippers’
December 25, 2023Rewterz Threat Advisory – CVE-2023-34064 – VMware Workspace One Launcher Vulnerability
December 25, 2023Severity
High
Analysis Summary
CVE-2023-50198, CVE-2023-50199, CVE-2023-50200, CVE-2023-50201
D-Link G416 could allow a remote attacker to execute arbitrary commands on the system, caused by a flaw in the HTTP service listening on TCP port 80. By sending a specially crafted request, an attacker could exploit this vulnerability to execute code in the context of root.
CVE-2023-50202, CVE-2023-50203, CVE-2023-50214, CVE-2023-50215
D-Link G416 could allow a remote attacker to execute arbitrary commands on the system, caused by a flaw in the HTTP service listening on TCP port 80. By sending a specially crafted request, an attacker could exploit this vulnerability to execute code in the context of root.
CVE-2023-50210, CVE-2023-50211, CVE-2023-50212, CVE-2023-50216, CVE-2023-50217
D-Link G416 devices could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the HTTP service listening on TCP port 80. By sending a specially crafted system call, an attacker could exploit this vulnerability to execute arbitrary code in the context of root.
Impact
- Gain Access
- Information Disclosure
- Buffer Overflow
- Code Execution
Indicators Of Compromise
CVE
- CVE-2023-50198
- CVE-2023-50199
- CVE-2023-50200
- CVE-2023-50201
- CVE-2023-50202
- CVE-2023-50203
- CVE-2023-50214
- CVE-2023-50215
- CVE-2023-50210
- CVE-2023-50211
- CVE-2023-50212
- CVE-2023-50216
- CVE-2023-50217
Affected Vendors
D-Link
Affected Products
- D-Link G416 1.08b02
Remediation
Refer to D-Link Website for patch, upgrade or suggested workaround information.