CVE-2018-10748

CVE-2018-10748 affects D-Link DSL-3782 EU 1.01. The issue is a buffer overflow in the Diagnostics component’s /userfs/bin/tcapi binary when a long ‘show’ parameter is passed to show . An authenticated user can cause memory corruption and may execute arbitrary code. Exploitation details beyond thi...

CVE-2018-10749

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...

CVE-2018-10747

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'unset ' function and cause memory corruption. Furthermore, it is possible to redirect the flow...

CVE-2018-10747

Affected product: D-Link DSL-3782 EU version 1.01. In the Diagnostics component, the /userfs/bin/tcapi binary accepts an unset parameter. An authenticated user can supply a long buffer to unset and trigger memory corruption, potentially redirecting program flow and enabling arbitrary code execut...

CVE-2018-10750

Summary: CVE-2018-10750 affects the D-Link DSL-3782 EU 1.01 firmware. An authenticated user can supply a very long value to the /userfs/bin/tcapi binary via the staticGet function, triggering a buffer overflow that corrupts memory and can redirect program flow to execute arbitrary code. Several ...

CVE-2018-10746

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'get ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of t...

CVE-2018-10746

CVE-2018-10746 affects the D-Link DSL-3782 EU 1.01 router. The vulnerability resides in the Diagnostics component: an authenticated user can pass a long buffer as the ‘get ’ parameter to the /userfs/bin/tcapi binary, leading to memory corruption and enabling potential arbitrary code execution by ...

CVE-2018-10749

The CVE refers to D-Link DSL-3782 EU 1.01 with a buffer overflow in the Diagnostics component, via /userfs/bin/tcapi using commit . An authenticated user can trigger memory corruption and potentially execute arbitrary code. Connected sources (e.g., PT-2018-3914) confirm a 1.01 version and remote-...

CVE-2018-10713

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

Memory corruption

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

CVE-2018-10713

Affected product: D-Link DSL-3782 EU 1.01. Vulnerability: in Diagnostics component, authenticated users can pass a long buffer to /userfs/bin/tcapi via the read function, triggering a memory corruption (buffer overflow) that can redirect program flow and allow arbitrary code execution. Connected...

CVE-2018-10713

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...

PT-2018-3914 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.01 Description: The issue is related to a buffer overflow in the /userfs/bin/tcapi binary of the Diagnostics component in the D-Link DSL-3782 router's firmware. This can be exploited by passing a long buffer as the...

PT-2018-3913 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.01 Description: The issue is related to a buffer overflow in the /userfs/bin/tcapi binary of the Diagnostics component in the D-Link DSL-3782 router's firmware. This can be exploited by passing a long buffer as the...

PT-2018-3915 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.01 Description: The issue is related to a buffer overflow in the /userfs/bin/tcapi file of the Diagnostics component in the D-Link DSL-3782 router's firmware. This can be exploited by an authenticated user who passe...

PT-2018-3905 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 EU version 1.01 Description: An issue in the Diagnostics component of the D-Link DSL-3782 EU device allows an authenticated user to cause memory corruption by passing a long buffer as a read parameter to the /userfs/bin/tcapi...

PT-2018-3910 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 EU version 1.01 Description: An issue in the Diagnostics component of the D-Link DSL-3782 EU device allows an authenticated user to cause memory corruption by passing a long buffer as a get parameter to the /userfs/bin/tcapi...

PT-2018-3912 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 EU version 1.01 Description: An issue in the Diagnostics component of the D-Link DSL-3782 EU device allows an authenticated user to cause memory corruption by passing a long buffer as an 'unset' parameter to the...

D-Link DSL-3782 Buffer Overflow Vulnerability

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the Diagnostics function of D-Link DSL-3782 devices using firmware version EU 1.01. The vulnerability can be exploited by a remote attacker to execute arbitrary code by sending a long 'Addr...

CVE-2018-8941

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set DiagnosticsEntry' function in an HTTP request, related to /userfs/bin/tcapi...