Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Alert: D-LINK Security Updates – May 2023

D-Link has released security updates for two critical vulnerabilities (CVE-2023-32165 and CVE-2023-32169) in its D-View 8 network management suite, rated 9.8 out of 10 in CVSSv3. These vulnerabilities enable remote attackers to bypass authentication and execute arbitrary code on affected systems.

 

Affected Systems

 

  • D-View 8 software version 2.0.1.27 and below.

 

Security Risks

 

The identified vulnerability in D-Link's D-View 8 network management suite presented significant security risks, as they could allow remote attackers to bypass authentication mechanisms and execute arbitrary code on compromised systems.

 

Recommended Actions

 

The National Cyber Security Authority (NCSA) strongly recommends to system administrators to:

 

  • Follow D-Link's security bulletin to lower the risk of potential exploits, protect systems, and ensure their security.
  • Apply the required and latest security updates as soon as possible.

 

        The released software version to upgrade to is:

 

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us on 9009.

 

References

D-Link's security bulletin.

https://www.zerodayinitiative.com/advisories/ZDI-23-714/

https://www.zerodayinitiative.com/advisories/ZDI-23-716/

https://dview.dlink.com/freetrial

https://dview.dlink.com/supportedModel