D-Link DSL-3782 Authentication Bypass

Exploit Title: D-Link DSL 3782 - Authentication Bypass Vendor Homepage: https://eu.dlink.com Version: A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" Category: Webapps Exploit Author: Giulio Comi CVE : CVE-2018-8898 Date: 20/05/2018 Description The web panel ...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09180)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09179)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09181)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782 EU version 1.01. An attacker can exploit this vulnerability to cause memory corruption, potentially redirecting program flow and executin...

D-Link DSL-3782 Code Execution Vulnerability

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DSL-3782 EU version 1.01. The vulnerability can be exploited by an attacker to cause memory corruption, potentially redirecting program flow and executing arbitrary code...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09182)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...

CVE-2018-10746

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'get ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of t...

CVE-2018-10748

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'show ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'get ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of t...

CVE-2018-10750

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...

CVE-2018-10748

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'show ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

CVE-2018-10746

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'get ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of t...

CVE-2018-10749

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...

CVE-2018-10750

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...

CVE-2018-10747

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'unset ' function and cause memory corruption. Furthermore, it is possible to redirect the flow...

CVE-2018-10749

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'show ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...

CVE-2018-10748

CVE-2018-10748 affects D-Link DSL-3782 EU 1.01. The issue is a buffer overflow in the Diagnostics component’s /userfs/bin/tcapi binary when a long ‘show’ parameter is passed to show . An authenticated user can cause memory corruption and may execute arbitrary code. Exploitation details beyond thi...