Threats tagged 'ghsa-566r-rxh9-78f8'

A command injection vulnerability exists in the D-Link DIR-823G router firmware version DIR823G_V1.0.2B05_20181207.bin. The flaw is in the timelycheck and sysconf binaries that process the /var/system/linux_vlan_reinit file. Because the content from this file is only partially validated before being passed to system(), an attacker with write access to this file can execute arbitrary commands on the device.