CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

Command injection

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637: Improper Neutralization of Special Elements used in a Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637

CVE-2023-39637 affects D-Link DIR-816 A2 firmware 1.10 B05. The vulnerability is a command injection via the vulnerable component /goform/Diagnosis . CVSS-3.1 base metrics indicate network access, no privileges required, no user interaction, and high impact on confidentiality, integrity, and avai...

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from the component /goform/Diagnosis containing command injection...

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

Command injection

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

CVE-2022-37130: Improper Neutralization of Special Elements used in an OS Command

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/Diagnosis, where setnum is spliced and then executed after the...

CVE-2018-17068: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command injection via shell metacharacters in the sendNum parameter...