CNNVD-202602-1208 Information

CNNVD ID

CNNVD-202602-1208

CVE-2026-2157

  • CNNVD Published: 2026-02-08

Description (Chinese)

D-Link DIR-823X是中国友讯(D-Link)公司的一款无线路由器。 D-Link DIR-823X 250416版本存在操作系统命令注入漏洞,该漏洞源于对文件/goform/set_static_route_table中参数interface/destip/netmask/gateway/metric的错误操作,可能导致os命令注入。

Description (English)

D-Link DIR-823X is a wireless router of D-Link. The D-Link DIR-823X 250416 version has an operational system command-injecting loophole, which is the result of an error in the parameter in file/goform/set static route table, interface/distip/netmask/gateway/metric, which may lead to an Os command injection.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

友讯

Published

2026-02-08

Last Modified

2026-02-24

References

https://vuldb.com/?submit.748376 https://vuldb.com/?id.344859 https://github.com/master-abc/cve/issues/28 https://vuldb.com/?ctiid.344859 https://www.dlink.com/ https://access.redhat.com/security/cve/cve-2026-2157

Share on: