CVE-2023-43284 PoC — D-Link DIR-846 安全漏洞

Source

https://github.com/MateusTesser/CVE-2023-43284

Associated Vulnerability

Title: D-Link DIR-846 安全漏洞 (CVE-2023-43284)
Description:D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.

Description

DLink DIR-846 Authenticated Remote Code Execution

Readme

# CVE-2023-43284
DLink Model DIR-846 Authenticated Remote Code Execution.

This flaw abuse QoS POST parameter in the router to exploit an Authenticated Remote Code Execution. (Doesn't require QoS be enabled!)

```
  -h, --help        show this help message and exit
  -x , --command    Command to be executed (Default: id)
  -p , --password   Password from router.
  -i , --ip         IP from router. (Default: 192.168.0.1)
```
### Proof of Concept:
![Exploit](https://github.com/MateusTesser/CVE-2023-43284/blob/main/exploit.png?raw=true)

* Tested firmware version: 100A53DBR-Retail

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →