CVE-2023-43240 is a critical stack overflow vulnerability affecting D-Link DIR-816 A2 v1.10CNB05 routers, specifically through the sip_address parameter in ipportFilter. With a CVSS score of 9.8, this vulnerability allows unauthenticated attackers to execute arbitrary code remotely with high impact on confidentiality, integrity, and availability, requiring no user interaction. While its EPSS score indicates a higher-than-average exploitability probability, there is currently no public exploit code available, nor is it listed on CISA's KEV catalog. Despite its severity, there is no community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.10cnb05CPE matchmatch criteria | cpe:2.3:o:dlink:dir-816_a2_firmware:1.10cnb05:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.