The vulnerability of the “cgi-bin/execute_cmd.cgi” implementation of D-Link DSL-2888A router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the “cgi-bin/executecmd.cgi” implementation of D-Link DSL-2888A router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

Command Injection on a D-Link Router

During the COVID-19 pandemic, I wanted to extend the local WiFi in my home to reach all the floors. The goal was to have full connectivity from every location in the house...

The vulnerability of D-Link DSL-2640B router software lies in the use of pre-installed credentials, which allows attackers to increase their privileges.

The vulnerability of D-Link DSL-2640B router software is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The software vulnerabilities of the D-Link DSL-2640B router, which stem from insufficient validation of input data, allow attackers to alter the device’s configuration.

The vulnerability of D-Link DSL-2640B router software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to remotely alter the device’s configuration...

Denial of Service Vulnerability in D-Link Router COVR-3902

The COVR-3902 is a router from D-Link. A denial of service vulnerability exists in the D-Link router COVR-3902, which can be exploited by attackers to cause a denial of service attack...

D-Link DSL-2888A Access Control Error Vulnerability

The D-link DSL-2888A is a Unified Services Router from D-link China. An access control error vulnerability exists in the D-Link DSL-2888A devices, which can be exploited by an unauthenticated attacker to bypass authentication and access authenticated pages and features...

D-Link DSR-250 Command Injection Vulnerability (CNVD-2020-72722)

The D-Link DSR-250 is an 8-port Gigabit VPN router with dynamic Web content filtering. A command injection vulnerability exists in the D-Link DSR-250 3.17. The vulnerability stems from insufficient validation of configuration file checksums. An attacker can use this vulnerability to inject...

D-Link DIR-822 Buffer Overflow Vulnerability

The D-Link DIR-822 is an AC1200 Wi-Fi router. A buffer overflow vulnerability exists in the D-Link DIR-822 v.202KRb06 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow via the long MacAddress data in the /HNAP1/SetClientInfo HNAP protocol message...

PT-2020-14693 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816L devices versions 2.x before 1.10b04Beta02 Description: A security issue was found where an XSS problem exists due to a lack of output filtration applied to the RESULT parameter in the file webinc/js/info.php, which is then...

D-Link DSL-2750U Access Control Error Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in the D-link DSL-2750U ISL2750UEME version 3.V1E, which can be exploited by an attacker to gain access to the control panel for approximately 90 seconds when the device is...

The vulnerability of the toolsadmin.php component of the D-Link DIR-865L router’s microprogramming software allows a hacker to gain unauthorized access to protected data.

The vulnerability of the toolsadmin.php component in the D-Link DIR-865L router’s microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

The vulnerability of the executable file cgibin.exe of the D-Link DIR-865L router’s microprogramming system allows a hacker to execute arbitrary operating system commands.

The vulnerability of the executable file cgibin.exe of the D-Link DIR-865L router operating system exists due to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

The vulnerability of the system_time.cgi component of D-Link DIR-825 and TRENDnet TEW-632BRP router microprograms allows a hacker to execute arbitrary commands.

The vulnerability of the systemtime.cgi component in D-Link DIR-825 and TRENDnet TEW-632BRP routers exists due to the failure to address the need to neutralize specific elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Unspecified Vulnerability in D-Link DIR-600M and DSL 2730-U

The D-Link DIR-600M and the D-Link DSL 2730-U are both wireless routers from AUO D-Link of Taiwan, China. A security vulnerability exists in the DNS resolver search path in the D-Link DSL 2730-U IN1.10 version, IN1.11 version, and DIR-600M 3.04 version. A remote attacker could exploit this...

D-Link DIR-865L Cross-Site Request Forgery Vulnerability (CNVD-2020-33172)

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A cross-site request forgery vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which originates from the program failing to properly validate user input. A remote attacker could exploit this vulnerabilit...

D-Link DIR-865L Operating System Command Injection Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An operating system command injection vulnerability exists in D-Link DIR-865L Ax version 1.20B01 Beta. An attacker can exploit the vulnerability by sending a specially crafted request to execute arbitrary shell commands...

D-Link DIR-865L Encryption Problem Vulnerability

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A vulnerability with encryption issues exists in D-Link DIR-865L Ax version 1.20B01 Beta. A remote attacker can exploit the vulnerability to obtain sensitive information...

D-Link DIR-865L Information Disclosure Vulnerability (CNVD-2020-33169)

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in D-Link DIR-865L Ax version 1.20B01 Beta, which originates from the program storing sensitive information in plaintext form. An attacker can exploit this vulnerability to...

D-Link DIR-865L Information Disclosure Vulnerability (CNVD-2020-33173)

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which originates from a program that passes sensitive information in clear text. A remote attacker can exploit this vulnerabili...