CVE-2023-44413 is a high severity (CVSS 7.5) missing authentication flaw in the shutdown_coreserver action of D-Link D-View 8. A remote, unauthenticated attacker can cause a denial of service. The record names version 1.0.2.13 and no fix, so limit network access to the server and ask D-Link.
What's affected
The record names D-Link D-View 8 version 1.0.2.13 as the affected product and lists no fixed version. ZDI advisory ZDI-23-1511 is the source. In it, ZDI says that on 30 August 2023 D-Link stated it had no record of the case, and ZDI forwarded the original report the next day. The advisory does not mention a patch.
The record scores the flaw 7.5 (High), vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. That is network reachable, low complexity, no privileges, no user interaction, and the only impact is availability. The weakness is CWE-306, missing authentication for a critical function. The record does not mark the CVE as known exploited.
The record lists only 1.0.2.13. Other versions may or may not be affected. The advisory does not say, so do not read the single version as a safe boundary.
How to check if you're exposed
D-View is network monitoring software, usually installed on a server.
- Find your D-View installs. Look for the D-View 8 service on Windows servers and note the version in the application or in the installed programs list.
- If you run 1.0.2.13, treat it as affected.
- Check D-Link's support pages for a newer D-View 8 release and read its notes for any mention of this issue.
- Check which hosts can reach the D-View server ports from your networks.
Safeguard offers a free in-browser dependency scan at gold.safeguard.sh/scan. It reads package manifests, so it will not see installed desktop software or device firmware, but it covers the open source dependencies in your own code.
What to do now
- Restrict network access to the D-View server so only administrator workstations and monitored devices can reach it.
- Do not expose the D-View interface to the internet.
- Ask D-Link whether a release after 1.0.2.13 fixes the missing authentication on the shutdown action.
- Set up an alert on the D-View service so an unexpected stop is noticed quickly.
- If monitoring availability matters to you, plan a fallback monitor that does not share the same weakness.
Why it matters
Missing authentication means a function that should require a logged in administrator can be called by anyone who can reach it. Here the function stops the core server. Nothing is stolen, but the monitoring platform goes dark.
An outage of a monitoring tool is a security problem as well as an operations problem. While D-View is down, you may not see failures or changes on the devices it watches. An attacker who wants to act unnoticed could use that gap. ZDI's advice for this case is to restrict interaction with the application, which here means network level access control.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
What does the flaw let an attacker do?
It lets an unauthenticated remote attacker stop the D-View core server, causing denial of service. The record lists no confidentiality or integrity impact.
Is a fix available?
The record and the ZDI advisory do not name one. Check D-Link's support site.
Sources
Last reviewed: 19 October 2026.
