CVE-2023-31814

CRITICAL

D-Link DIR-300 Firmware <= REVA1.06 and <= REVB2.06 - File Inclusion via /model/__lang_msg.php

Title source: llm
STIX 2.1

Description

D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0089
EPSS Percentile 54.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-706
Status published
Products (1)
dlink/dir-300_firmware < 1.06
Published May 23, 2023
Tracked Since Feb 18, 2026