CVE-2023-32142 D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The...

CVE-2023-32141 D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc WEBDisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability...

CVE-2023-32141 D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc WEBDisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability...

CVE-2023-32140 D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc var:sysToken Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. T...

CVE-2023-32140

CVE-2023-32140 affects D-Link DAP-1360 via a heap-based buffer overflow in the webproc endpoint (/cgi-bin/webproc) when parsing var:sys_Token. The flaw allows network-adjacent attackers (no authentication) to execute code with root privileges. Impact is remote code execution with full device comp...

CVE-2023-32141

The CVE-2023-32141 issue affects D-Link DAP-1360 devices, where an unvalidated length when handling /cgi-bin/webproc requests (getpage/errorpage) causes a stack-based buffer overflow. This leads to remote code execution with root privileges by a network-adjacent attacker, without authentication. ...

CVE-2023-32139 D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-32139

CVE-2023-32139 affects D-Link DAP-1360 devices (also reported for DAP-2020) via a stack-based buffer overflow in the /cgi-bin/webproc endpoint. The flaw arises from insufficient validation of user-supplied data before copying it into a fixed-length stack buffer, enabling network-adjacent attacker...

CVE-2023-32139 D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-32138 D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-32138 D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-32138

CVE-2023-32138 affects D-Link DAP-1360 (and related DAP-2020 devices per sources). The vulnerability is a heap-based buffer overflow in the webproc handler for the "/cgi-bin/webproc" endpoint, caused by improper validation of the length of user-supplied data copied into a fixed‑length heap buffer...

CVE-2023-32137 D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability

D-Link DAP-1360 webproc WEBDisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2023-32137

CVE-2023-32137 relates to a directory traversal information disclosure in D-Link DAP-1360/DAP-2020 devices via the /cgi-bin/webproc endpoint. The flaw stems from insufficient validation of a user-supplied path used in file operations, allowing network-adjacent attackers to disclose sensitive info...

CVE-2023-32137 D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability

D-Link DAP-1360 webproc WEBDisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2023-32136

CVE-2023-32136 concerns D-Link DAP-1360 webproc var:menu stack-based buffer overflow leading to remote code execution. Affected component: the /cgi-bin/webproc endpoint handling of the var:menu parameter; root-level arbitrary code execution is possible without authentication. Exploitation details...

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...