Platform
other
Component
d-view
Fixed in
8.0.1
CVE-2023-32165 is a critical Remote Code Execution (RCE) vulnerability discovered in D-Link D-View 8. This flaw allows unauthenticated attackers to execute arbitrary code on affected systems, potentially leading to complete system compromise. The vulnerability impacts version 1.0.2.13 of D-Link D-View 8. A patch is available from D-Link to address this issue.
The impact of CVE-2023-32165 is severe due to the ease of exploitation and the potential for complete system takeover. An attacker can leverage the vulnerability via the TftpReceiveFileHandler to upload and execute malicious code without requiring any authentication. This allows for arbitrary code execution in the SYSTEM context, granting the attacker full control over the affected D-View 8 instance. Successful exploitation could lead to data theft, system modification, denial of service, or the installation of persistent malware. The lack of authentication makes this vulnerability particularly concerning, as it significantly lowers the barrier to entry for attackers.
CVE-2023-32165 was reported to ZDI as ZDI-CAN-19497. Public proof-of-concept (POC) code is likely to emerge given the vulnerability's ease of exploitation and the critical severity. The vulnerability is not currently listed on the CISA KEV catalog, but its severity warrants monitoring. Active exploitation campaigns are possible, particularly targeting organizations using D-Link D-View 8 in exposed or poorly secured environments.
Exploit Status
EPSS
43.44% (97% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2023-32165 is to upgrade D-Link D-View 8 to a patched version as soon as possible. D-Link has not released a specific fixed version in the provided data. If immediate patching is not feasible, consider temporarily disabling the TFTP server functionality within D-View 8 to reduce the attack surface. Network segmentation and strict firewall rules can also help limit the potential impact by restricting access to the D-View 8 management interface. After upgrading, verify the fix by attempting to trigger the vulnerable TftpReceiveFileHandler functionality and confirming that the request is rejected.
Update D-View to a version later than 1.0.2.13. Consult the vendor's website (D-Link) for the latest version and update instructions. Apply the security measures recommended by the vendor.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2023-32165 is a critical Remote Code Execution vulnerability in D-Link D-View 8, allowing attackers to execute code without authentication.
If you are using D-Link D-View 8 version 1.0.2.13, you are potentially affected by this vulnerability. Upgrade to a patched version as soon as possible.
Upgrade D-Link D-View 8 to a patched version. If patching is not immediately possible, disable the TFTP server functionality.
While there is no confirmed active exploitation, the vulnerability's ease of exploitation and critical severity suggest active exploitation is possible.
Refer to the D-Link Security Advisory page for the latest information and updates regarding CVE-2023-32165.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.