D-Link DIR-823X Command Injection Vulnerability Allowing Arbitrary Command Execution

A command injection vulnerability has been identified in the D-Link DIR-823X router, specifically in firmware versions 240126 and 240802. This vulnerability allows an authorized attacker to execute arbitrary commands on the device. The issue arises when a POST request is sent to the '/goform/set_prohibiting' endpoint, exploiting a function that triggers remote command execution.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, an authorized user must send a POST request to the '/goform/set_prohibiting' endpoint. This request should include payloads that exploit the command injection vulnerability, allowing the execution of arbitrary commands on the device.