CVE-2022-37057

D-Link Go-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgimain...

D-Link GO-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. A security vulnerability exists in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 versions, which stems from not checking the size on the stack...

D-Link GO-RT-AC750 操作系统命令注入漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. An operating system command injection vulnerability exists in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 versions, which stems from not checking the size on the stack...

CVE-2022-35192

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via the User parameter or Pwd parameter to Login.asp...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

CVE-2022-37134

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...

CVE-2022-36526

D-Link GO-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Authentication Bypass via function phpcgimain in cgibin...

CVE-2022-36523

D-Link Go-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php...

Authentication flaw

D-Link GO-RT-AC750 GORTAC750revAv101b03 & GO-RT-AC750revBFWv200b02 is vulnerable to Authentication Bypass via function phpcgimain in cgibin...

D-Link GO-RT-AC750 命令注入漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. Command injection vulnerabilities exist in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02, which stem from easy command injection via /htdocs/upnpinc/gena.php...

CVE-2022-34973

D-Link DIR820LA1FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp...

CVE-2022-35620

D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...

CVE-2022-34974

D-Link DIR810LA1FW102B22 was discovered to contain a command injection vulnerability via the Pingaddr function...

PT-2022-7030 · D Link · D-Link Dir820La1

Name of the Vulnerable Software and Affected Versions: D-Link DIR820LA1 versions prior to FW106B02 Description: The issue is caused by a buffer overflow on the stack in the ping.ccp component of the D-Link DIR820LA1 router's firmware. This can be exploited by a remote attacker to cause a denial o...

CVE-2022-34527

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

Stack overflow

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue...

The vulnerability of the __ajax_explorer.sgi file in D-Link DIR-645 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the ajaxexplorer.sgi file of the D-Link DIR-645 router microprogramming system is related to the failure to eliminate special elements used in the operating system’s processing of the QUERYSTRING parameter. Exploiting this vulnerability can allow an attacker to execute...

The vulnerability of the execute_cmd.cgi implementation of the microprogramming software for D-Link DSL-G2452DG routers (fw_THG5501N-MDH2_TM1.06_V1.2.8l-Image-all_Fixportforwarding.bin) allows a hacker to execute arbitrary commands.

The vulnerability of the executecmd.cgi implementation of the microprogramming software for D-Link DSL-G2452DG routers fwTHG5501N-MDH2TM1.06V1.2.8l-Image-allFixportforwarding.bin is related to incorrect handling of permissions. Exploiting this vulnerability can allow an attacker to execute...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

The vulnerability of D-Link DIR816L router’s microprogramming software allows a hacker to gain access to the folder_view.php and category_view.php folders.

The vulnerability of D-Link DIR816L router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to the folders folderview.php and categoryview.php...