CVE-2023-32223 - CVE House
Back to Database
Status published High CVE-2023-32223

D-Link DSL-224 firmware version 3.0.10 post authentication command execution

Vulnerability Description

D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32223

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Nerya Zadkani

References

More from D-Link

View All →
CVE-2025-9938
D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow
High 8.7
CVE-2025-9769
D-Link DI-7400G+ mng_platform.asp sub_478D28 command injection
Low 2.4
CVE-2025-9752
D-Link DIR-852 SOAP Service soap.cgi soapcgi_main os command injection
Medium 6.9
CVE-2025-9745
D-Link DI-500WF jhttpd version_upgrade.asp os command injection
Medium 5.1
CVE-2025-9727
D-Link DIR-816L soap.cgi soapcgi_main os command injection
Medium 5.3

Affected Vendor

Affected Software

DSL-224 firmware version 3.0.10
Vulnerable Versions:
Update to the latest version

Timeline

Official Publish: June 28th, 2023
Last Modified: November 27th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.