CVE-2017-6206

CVE-2017-6206 The DGS-1510 Websmart switch series firmware has been found to have security vulneratiblies. The vulnerabilities include unauthenticated command bypass and unauthenticated information disclosure. exploit.sh contains both PoC code and it will create a remote user at specified D-Link...

The vulnerability of D-Link DGS-1510 network device’s microprogramming software lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the D-Link DGS-1510 network device’s microprogramming software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

D-Link DGS-1510 Command Injection Vulnerability

The D-Link DGS-1510 is a DGS-1510 series switch from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DGS-1510 using firmware versions 1.20.011, 1.30.007, and 1.31.B003 and earlier. A remote attacker can exploit the vulnerability to inject malicious scripts and execute...

CVE-2018-7859

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit...

PT-2019-5689

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510-series switches versions 1.20.011 through 1.31.B003 and older Description The issue is related to a lack of protection for the web page structure, which may allow a remote attacker to inject malicious scripts into the device an...

CVE-2018-7859: Improper Neutralization of Input During Web Page Generation

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit...

D-Link DGS-1510 - Multiple Vulnerabilities

================ get-user-info.py ================ import re import os.path import urllib2 import base64 import gzip import zlib from StringIO import StringIO from io import BytesIO def makerequests: """Calls request functions sequentially.""" response = None responseText = None...

PT-2017-16944

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510 series versions prior to 1.31.B003 Description The issue allows attackers to conduct Unauthenticated Command Bypass attacks. The exact vectors used for the attack are not specified. Recommendations For D-Link DGS-1510 series...

PT-2017-16945

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510 series versions prior to 1.31.B003 Description The issue allows attackers to conduct Unauthenticated Information Disclosure attacks. The exact vectors used for the attack are not specified. Recommendations For D-Link DGS-1510...

CVE-2017-6205: Undefined Security Weakness

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors...

CVE-2017-6206: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors...