1529 matches found
CVE-2022-43623
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2022-43621
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from an...
CVE-2022-43648
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of prope...
D-Link DIR-1935 操作系统命令注入漏洞
The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing an IPAddress element, where the process does not properly validate before executing a system call with a...
CVE-2022-43631
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
The vulnerability of the lan.asp file in the D-Link DIR-820L A1 router’s microprogramming software allows a hacker to cause a service failure.
The vulnerability of D-Link DIR-820L A1 microprogrammed router software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2022-43629
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
The vulnerability of the SetVirtualServerSettings function in D-Link DIR-867 router microprogramming software allows a hacker to execute arbitrary commands in the device’s operating system under the identity of the root user.
The vulnerability of the SetVirtualServerSettings function in D-Link DIR-867 router microprogramming software is related to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the device’s operating system under the identi...
CVE-2023-25281
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
D-Link DIR820LA1 操作系统命令注入漏洞
The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of an operating system command injection vulnerability that can be exploited by an attacker to elevate privileges to root via a...
D-Link DIR820LA1 缓冲区错误漏洞
The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service via the nextPage parameter of...
D-Link DIR820LA1 操作系统命令注入漏洞
D-Link DIR820LA1 is a router from D-Link, a Chinese company. The D-Link DIR820LA1 is vulnerable to a command injection vulnerability that could be exploited by an attacker to elevate privileges to root by designing the payload...
D-Link DIR820LA1 缓冲区错误漏洞
D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in version D-Link DIR820LA1FW106B02. An attacker can exploit this vulnerability to cause a denial of service via the reserveDHCPHostName1.1.1.0 parameter in lan.asp...
CVE-2023-24762
OS Command injection vulnerability in D-Link DIR-867 DIR867FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1...
PT-2023-3481 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G firmware version 1.02B05 Description: The issue is related to a buffer overflow in the implementation of the HNAP1 protocol in the D-Link DIR-823G router's firmware. This occurs when processing the SetParentsControlInfo...
CVE-2023-24347
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus...
CVE-2023-24349
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute...
CVE-2023-24346
D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wanconnected parameter at /goform/formEasySetupWizard3...