D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the pskValue parameter of the setSecurity function...

CVE-2022-42998

The CVE-2022-42998 entry concerns the D-Link DIR-816 A2 router (firmware 1.10 B05). A stack overflow is triggered via the srcip parameter in the /goform/form2IPQoSTcAdd endpoint. This affects the device’s firmware and is rated critical (CVSSv3.1: AV Network, AC Low, PR None, UI None, S Unchanged;...

CVE-2022-42999

CVE-2022-42999 affects the D-Link DIR-816 A2 router (firmware 1.10 B05). The root cause is command injection in the web API endpoint at /goform/setSysAdm, exploitable through the admuser and admpass parameters. The issue can lead to arbitrary command execution with high impact, notably a High CVS...

CVE-2022-43001

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function...

PT-2022-5271 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to command injection vulnerabilities. These vulnerabilities can be exploited via the admuser and admpass parameters at the "/goform/setSysAdm" API endpoint. The vulnerabilit...

PT-2022-5272 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the D-Link DIR-816 A2 router's firmware, which can be triggered via the srcip parameter at the "/goform/form2IPQoSTcAdd" API endpoint. This can...

PT-2022-5273 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a buffer overflow in the setRepeaterSecurity function of the D-Link DIR-816 A2 router's firmware. This can be exploited by a remote attacker using the pskValue parameter ...

PT-2022-5268 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the setSecurity function, specifically via the pskValue parameter. This can potentially allow a remote attacker to execute arbitrary code due to a...

CVE-2022-42998

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the wizardstep4pskpwd parameter of /goform/form2WizardStep4...

CVE-2022-37778

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

CVE-2022-37779

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the sendnum parameter of the ping function...

CVE-2022-37778

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

多款Phicomm产品安全漏洞

Phicomm FIR151B A2 and others are a wireless router from Ficomm China. A security vulnerability exists in the Phicomm FIR151B A2, FIR302E A2, FIR300B A2, and FIR303B A2 routers version V3.0.1.17, which stems from the discovery of a Remote Command Execution RCE vulnerability via the pingAddr...

多款Phicomm产品安全漏洞

Phicomm FIR151B A2 and others are a wireless router from Ficomm China. A security vulnerability exists in the Phicomm FIR151B A2, FIR302E A2, FIR300B A2, and FIR303B A2 routers, version V3.0.1.17, which stems from the discovery of a Remote Command Execution RCE vulnerability via the sendnum...

多款Phicomm产品安全漏洞

The Phicomm FIR151B A2, among others, is a wireless router from the Chinese company Fusion Phicomm. A security vulnerability exists in Phicomm, which stems from the trHops parameter of its tracert function that allows an attacker to achieve remote command execution. The following versions are...

CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

CVE-2022-36619

In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...

CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

CVE-2022-37129

CVE-2022-37129 affects the D-Link DIR-816 A2 with firmware version 1.10CNB04. The vulnerability is a remote command injection via the HTTP endpoint /goform/SystemCommand . User-supplied parameter “command” is spliced into a local buffer (byte_4836B0) using snprintf and then executed through a cal...