CVE-2023-26925 Information disclosure in n/a

What is CVE-2023-26925?

CVE-2023-26925 is a high-severity vulnerability in n/a, published on 31 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information.

Which versions are affected by CVE-2023-26925?

It affects 1 product.

Products include Dlink Dir-882 Firmware.

How do I fix CVE-2023-26925?

No fix has been published for CVE-2023-26925 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-26925 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-26925 exists.

Other vulnerabilities in n/a

• CVE-2022-44804 Memory corruption in n/a Critical 9.8
• CVE-2022-44806 Memory corruption in n/a Critical 9.8
• CVE-2022-44807 Memory corruption in n/a Critical 9.8
• CVE-2022-28895 Command injection in n/a Critical 9.8
• CVE-2022-28896 Command injection in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xf7c-xr6g-849j.