66 matches found
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to gain unauthorized access to protected information.
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows an attacker to gain unauthorized access to protected information when processing the $file parameter. Exploiting this vulnerability can enable a remote attacker to obtain unauthorized access to...
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software exposes a flaw in access control when processing the $GLOBALS"AUTHORIZEDGROUP" parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions and enhance their privileges...
CVE-2024-33110
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component...
CVE-2024-33110: Improper Authentication
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component...
CVE-2024-33110
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component...
CVE-2024-33110
The D-Link DIR-845L router (v1.01KRb03 and before) is vulnerable to a Permission Bypass within the getcfg.php component. The root cause is an access control flaw when the component processes the ** he_GLOBALS["AUTHORIZED_GROUP"]** parameter. A remote attacker can exploit this flaw to bypass secur...
CVE-2024-33110
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component...
CVE-2022-36755
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2022-36755
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2022-36755
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2022-36755
CVE-2022-36755 affects D-Link DIR845L A1 with an authentication flaw exploitable via an AUTHORIZED_GROUP=1 value, demonstrated by a getcfg.php request. CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction required, and impacts on confidentiality, integrity, and availability...
CVE-2022-36755: Improper Authentication
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2022-28956
An issue in the getcfg.php component of D-Link DIR816LFW206b01 allows attackers to access the device via a crafted payload...
CVE-2022-28956
CVE-2022-28956 affects the D-Link DIR816L router, specifically the getcfg.php component in firmware FW206b01. The root cause is described as errors in the getcfg.php code that allow an unauthenticated attacker to access the device via a crafted payload, with impact described as partial confidenti...
CVE-2022-28956
An issue in the getcfg.php component of D-Link DIR816LFW206b01 allows attackers to access the device via a crafted payload...
CVE-2022-28956: Undefined Security Weakness
An issue in the getcfg.php component of D-Link DIR816LFW206b01 allows attackers to access the device via a crafted payload...
PT-2022-2698 · D Link · D-Link Dir-816L
Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions FW206b01 Description: The issue is related to the getcfg.php component and is caused by errors in the code. It allows attackers to access the device by using a specially crafted payload. Recommendations: For D-Link...
The vulnerability of the microprogrammed software of the D-Link DIR-615 Q1 network device, related to insufficient protection of registration data, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the D-Link DIR-615 Q1 network device’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a mail...
D-Link DIR-615 information leakage vulnerability
The D-Link DIR-615 is a SOHO wireless router with a maximum transfer rate of 300 Mbps. An information disclosure vulnerability exists in the D-Link DIR-615. The vulnerability can be exploited to obtain user name and password by forging a post request to the /getcfg.php page...