CVE-2023-44410

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-44410
D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-19535.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dlink:d-view_8:1.0.2.13:*:*:*:*:*:*:*
History

07 Aug 2025, 15:57

Type Values Removed Values Added
First Time Dlink d-view 8
Dlink
References () https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ - Third Party Advisory
CPE cpe:2.3:a:dlink:d-view_8:1.0.2.13:*:*:*:*:*:*:*

21 Nov 2024, 08:25

Type Values Removed Values Added
References () https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-1508/ -

18 Sep 2024, 19:15

Type Values Removed Values Added
Summary
  • (es) D-Link D-View muestra la vulnerabilidad de escalada de privilegios de autorización inadecuada de los usuarios. Esta vulnerabilidad permite a atacantes remotos escalar privilegios en las instalaciones afectadas de D-Link D-View. Se requiere autenticación para aprovechar esta vulnerabilidad. La falla específica existe dentro del método showUsers. El problema se debe a la falta de autorización adecuada antes de acceder a un endpoint privilegiado. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios a recursos normalmente protegidos del usuario. Era ZDI-CAN-19535.
Summary (en) D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-19535. (en) D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. . Was ZDI-CAN-19535.

03 May 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 03:15

Updated : 2025-08-07 15:57

NVD link : CVE-2023-44410

Mitre link : CVE-2023-44410

CVE.ORG link : CVE-2023-44410

JSON object : View

Products Affected

dlink

  • d-view_8
CWE
CWE-285

Improper Authorization