Lucene search
+L

63 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:50 a.m.•18 views

CVE-2024-42813

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

9.8CVSS8.1AI score0.00692EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:03 a.m.•19 views

CVE-2023-33626

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary...

9.8CVSS7.8AI score0.01531EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•22 views

The vulnerability of the gena.cgi file in D-Link DIR-860L router microprogramming software allows a hacker to cause a service failure or execute arbitrary commands.

The vulnerability of the gena.cgi file of the D-Link DIR-860L router’s microprogramming system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary commands using a specially...

9CVSS8.1AI score0.15507EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2024/08/21 12:00 a.m.•15 views

AUO DIR-860L Buffer Overflow Vulnerability

The AUO DIR-860L is a wireless router from China's AUO that supports the Wi-Fi 5 standard and offers dual-band 2.4GHz and 5GHz network connectivity with a maximum transmission speed of up to 1200 Mbps.The device has a built-in antenna and comes with one USB 3.0 port and four Gigabit wired ports. ...

9.8CVSS7.9AI score0.15507EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/19 8:15 p.m.•15 views

CVE-2024-42813

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

9.8CVSS6.3AI score0.00692EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/19 8:15 p.m.•14 views

CVE-2024-42812

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

9.8CVSS6.3AI score0.15507EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•15 views

D-Link DIR-860L 安全漏洞

The AUO DIR-860L is a wireless router from China's AUO that supports the Wi-Fi 5 standard and offers dual-band 2.4GHz and 5GHz network connectivity with a maximum transmission speed of up to 1200 Mbps.The device has a built-in antenna and comes with one USB 3.0 port and four Gigabit wired ports. ...

9.8CVSS7.8AI score0.15507EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•20 views

TRENDnet TEW-752DRU 安全漏洞

The TRENDnet TEW-752DRU is a dual-band wireless router from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-752DRU version FW1.03B01, which originates from a lack of length validation in the service field in gena.cgi, which could lead to a buffer overflow vulnerability and cause th...

9.8CVSS7.7AI score0.00692EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/08/19 12:00 a.m.•53 views

CVE-2024-42812

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

0.15507EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/08/19 12:00 a.m.•43 views

CVE-2024-42813

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

0.00692EPSS
SaveExploits1References1
CVE
CVE
•added 2024/08/19 12:00 a.m.•77 views

CVE-2024-42813

The TRENDnet TEW-752DRU dual-band wireless router (version FW1.03B01 ) contains a buffer overflow vulnerability in the gena.cgi component. The root cause is a lack of length verification for the service field, which can allow remote attackers to cause the device to crash or execute arbitrary comm...

9.8CVSS8.1AI score0.00692EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/19 12:00 a.m.•21 views

CVE-2024-42813

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

8AI score0.00692EPSS
SaveExploits1References1
CVE
CVE
•added 2024/08/19 12:00 a.m.•86 views

CVE-2024-42812

CVE-2024-42812 affects D-Link DIR-860L firmware v2.03, due to a missing length check in the SID field of gena.cgi, causing a buffer overflow that can crash the device or allow arbitrary commands. OpenVAS and other feeds classify impact as high/critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

9.8CVSS8.1AI score0.15507EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•4 views

CVE-2024-42813: Buffer Copy without Checking Size of Input

In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

9.8CVSS6.5AI score0.00692EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•4 views

CVE-2024-42812: Buffer Copy without Checking Size of Input

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

9.8CVSS8.5AI score0.15507EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/08/19 12:00 a.m.•15 views

CVE-2024-42812

In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

8.3AI score0.15507EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/08/05 12:00 a.m.•23 views

PT-2024-6506 · D Link · D-Link Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.03 Description: The issue is related to a buffer overflow vulnerability in the gena.cgi file of the D-Link DIR-860L router's firmware. This vulnerability is caused by the lack of length verification for the SID field...

9.8CVSS9.8AI score0.15507EPSS
SaveExploits1References9
OpenVAS
OpenVAS
•added 2024/07/19 12:00 a.m.•72 views

D-Link DAP-1650 EOL Device Multiple Command Injection Vulnerabilities (Jan 2024)

D-Link DAP-1650 devices are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS9.8AI score0.25988EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/02/14 12:00 a.m.•16 views

The vulnerability of the gena.cgi module in D-Link DAP-1650 wireless access points allows a intruder to execute arbitrary commands.

The vulnerability of the gena.cgi module in D-Link DAP-1650 wireless access points is related to improper validation of input data during the processing of UPnP SUBSCRIBE messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using specially crafted data...

10CVSS8.2AI score0.25988EPSS
SaveExploits0References5
NVD
NVD
•added 2024/01/26 12:15 a.m.•26 views

CVE-2024-23624

A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

9.8CVSS9.9AI score0.25988EPSS
SaveExploits0References1
Rows per page
Query Builder