What is CVE-2023-41603?

CVE-2023-41603 is a medium-severity vulnerability in Dlink R15, classified under Improper Access Control. CVSS score: 5.3/10. Published 2024-01-10.

How severe is CVE-2023-41603?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2023-41603 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Dlink R15

CVE-2023-41603

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6.

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Dlink R15
Dlink R15_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

Public proof-of-concept exploits

YjjNJUPT/AsiaCCS2024_

References

cve@mitre.org (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2023-41603?: CVE-2023-41603 is a medium-severity vulnerability in Dlink R15, classified under Improper Access Control. CVSS score: 5.3/10. Published 2024-01-10.
How severe is CVE-2023-41603?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2023-41603 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.