CVE-2023-7163: d-link d-view 8 Improper Input Validation

Vulnerability summary

CVE-2023-7163 is a critical (CVSS 10.0) Improper Input Validation vulnerability in d-link d-view 8. EPSS estimates a 1.67% chance of exploitation in the next 30 days, higher than 76.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-12-2023
   PublishedVulnerability first disclosed.
2. 02-08-2024
   Last modifiedVulnerability information updated.

Description

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the execution of tasks on other probes.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.