D-Link fixes serious security flaws that could have left your business wide open to attack
Two flaws allow for remote code execution and more
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
D-Link has released patches for two critical vulnerabilities found in its network management suite which could allow threat actors to bypassauthenticationand execute arbitrary code, remotely.
The company fixed two flaws found in D-View, its network management suite that various businesses use for generalnetworkmanagement and administration.
The flaws were discovered late last year by security researchers taking part in Trend Micro’s Zero Day Initiative (ZDI). During the event, researchers found multiple vulnerabilities, with two standing out: CVE-2023-32165, and CVE-2023-32169. The former is a remote code execution flaw, which could be used to run malicious code with SYSTEM privileges. The latter, on the other hand, is an authentication bypass vulnerability that allows for the escalation of privilege, unauthorized access of information, and in some cases, installation of malware.
Beta patch
Both flaws carry a severity score of 9.8 (critical). The issue affects D-View 8 version 2.9.1.27 and older. D-Link released the patch roughly two weeks ago, and is now urging users to apply it as soon as possible.
“As soon as D-Link was made aware of the reported security issues, we had promptly started our investigation and began developing security patches,” the company said in a security advisory. The vendor also warned users that the patch is actually “beta software or hot-fix release”, meaning additional changes might occur in the future. It also means that the D-View might be unstable, or crash, after the introduction of the patch.
The vendor also told users to verify the hardware revision of theirendpoints, by inspecting the underside label or the web configuration panel, so that they don’t download the wrong firmware update.
The full list of the discovered vulnerabilities is as follows:
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
This venerable security vulnerability has exposed millions of routers to attack>Pretty much all Wi-Fi routers are vulnerable to attack, study finds>These are the best ID theft protection tools right now
Via:BleepingComputer
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
This new phishing strategy utilizes GitHub comments to distribute malware
Should your VPN always be on?
New fanless cooling technology enhances energy efficiency for AI workloads by achieving a 90% reduction in cooling power consumption
