VulnCheck KEV: CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2022-42999

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

PT-2022-5271 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to command injection vulnerabilities. These vulnerabilities can be exploited via the admuser and admpass parameters at the "/goform/setSysAdm" API endpoint. The vulnerabilit...

CVE-2022-28915

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm...

Belkin LINKSYS RE6500 Remote Code Execution Vulnerability

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

Belkin LINKSYS RE6500 操作系统命令注入漏洞

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

D-Link DIR-816 A2 Router Web or System Account Editing Vulnerability

The D-Link DIR-816 A2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-816 A2 version 1.11, which stems from the program only checking for random tokens when authorizing a goform request. The vulnerability can be exploited to edit web and...