{"id":"CVE-2023-44416","aliases":["EUVD-2023-48756","GHSA-jwgc-2cm6-rgjp"],"status":"published","title":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability","description":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20051.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01267,"percentile":0.70134,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-05-03T02:13:46Z","modified":"2026-06-17T06:27:36Z","products":[{"vendor":"d-link","product":"dap-2622"},{"vendor":"dlink","product":"dap-2622_firmware"},{"vendor":"kofax","product":"power_pdf"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1514/","tags":["x_research-advisory","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44416"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1514"},{"url":"https://github.com/advisories/GHSA-jwgc-2cm6-rgjp"}],"sources":{"cve":[{"id":"CVE-2023-44416","title":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability","description":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20051.","status":"published","published":"2024-05-03T02:13:46.203Z","modified":"2024-09-18T18:30:23.099Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:21.232549Z"}],"euvd":[{"id":"EUVD-2023-48756","description":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20051.","status":"published","published":"2024-05-03T02:13:46Z","modified":"2024-09-18T18:30:23Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:20.081918Z"}],"ghsa":[{"id":"GHSA-jwgc-2cm6-rgjp","title":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This...","description":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20051.","status":"published","published":"2024-05-03T03:31:04Z","modified":"2024-05-03T03:31:37Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:57:18.91536Z"}],"nvd":[{"id":"CVE-2023-44416","description":"D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the CLI service, which listens on TCP port 23. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20051.","status":"published","published":"2024-05-03T03:15:55.37Z","modified":"2026-06-17T06:27:36.45Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:09:12.053868Z"}]}}