PatchTheCVECVE-2019-7297: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03
CVE-2019-7297 is a critical-severity flaw (CVSS 9.8) affecting dir-823g firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.
Why this priority
- Critical severity
- EPSS top 4%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 12.5% (top 4%) |
| CISA exploited list | No |
| Weakness | CWE-78 |
| Published | 2019-01-31 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-7297?
dir-823g firmware: upgrade to newer than 1.02b03. Exact commands for each OS are on this page.
Is CVE-2019-7297 being exploited?
CVE-2019-7297 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-7297 affect?
CVE-2019-7297 affects dir-823g firmware. Severity is critical (CVSS 9.8). An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the
How urgent is CVE-2019-7297?
Priority 68/100. Critical severity; EPSS top 4%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2026-15270 HIGH 7.5 MITIGATE A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207
- CVE-2026-11492 MEDIUM 4.3 MITIGATE A security flaw has been discovered in D-Link DIR-823G 1.0.2B05
- CVE-2020-25368 CRITICAL 9.8 MITIGATE A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmwar
- CVE-2020-25367 CRITICAL 9.8 MITIGATE A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmwar
- CVE-2020-25366 CRITICAL 9.1 MITIGATE An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to ca