CVE-2020-13787

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...

Cross site request forgery (csrf)

D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...

Code injection

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

PT-2020-2907 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L Ax version 1.20B01 Beta Description: The issue is related to the lack of protection against cross-site request forgery CSRF in the web interface of the D-Link DIR-865L router's firmware. This can allow a remote attacker to...

Unspecified Vulnerability in D-Link DIR-615

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the login page of the D-Link DIR-615 T1 version 20.10. A remote attacker can exploit the vulnerability to bypass the CAPTCHA protection mechanism and conduct a brute force attack...

The vulnerability of the HNAP microprogramming software implementation for D-Link DAP-1330 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the HNAP microprogramming software for D-Link DAP-1330 wireless routers is related to errors in the implementation of the authentication algorithm. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DSL-2875AL Information Disclosure Vulnerability

The D-Link DSL-2875AL is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2875AL prior to version 1.00.05. The vulnerability can be exploited by an attacker to obtain a password by sending a simple /romfile.cfg request to the web management...

The vulnerability of the HTTP_ST component in the D-Link DIR-859 router’s microprogramming system arises from the failure to take measures to neutralize specific elements used in the operating system commands. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of the HTTPST component in the D-Link DIR-859 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

D-Link DIR-825 Stack Buffer Overflow Vulnerability

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A stack buffer overflow vulnerability exists in the httpd binary in the D-Link DIR-825 Rev. B 2.10. An attacker can exploit this vulnerability by sending a POST request to ntpsync.cgi with a sufficiently long parameter...

D-Link DIR-825 and TRENDnet TEW-632BRP Command Injection Vulnerability (CNVD-2020-16102)

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router.The TRENDnet TEW-632BRP is a 300Mbps wireless home router. A command injection vulnerability exists in the D-Link DIR-825 and TRENDnet TEW-632BRP. A remote attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

D-Link DIR-859 Arbitrary Code Execution Vulnerability

The D-Link DIR-859 is a popular router device. A security vulnerability exists in the D-Link DIR-859, which can be exploited by a remote attacker to submit a special request that can be executed in the application context to execute arbitrary code...

Command Execution Vulnerability in DLINKDIR-859 Series Routers

The D-Link DIR-859 is a wireless router from AUO D-Link of Taiwan, China. A remote command execution vulnerability exists in DLINK's DIR-859 series routers, which can be exploited by an attacker to execute arbitrary commands with root privileges on the target device...

D-Link DIR-601 Authentication Bypass Vulnerability

The D-Link DIR-601 B1 is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the D-Link DIR-601 B1 version 2.00NA, which originates from a program that only authenticates on the client side and fails to authenticate on the server side. An attacker...

CVE-2019-16326

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

D-Link DIR-615 Elevation of Privilege Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an elevation of privilege vulnerability that stems from the program's failure to perform complete validation of file paths and error detection. An attacker can exploit the elevation of...

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers allows a intruder to gain unauthorized access to protected information and alter the configuration settings.

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and modify configuration settings...

News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws

Threatpost news editors break down the top stories of the week, including: The Coalition Against Stalkerware launched this week, with the aim of offering a centralized location for helping victims of stalkerware, as well as defining what stalkerware is in the first place. Five U.S. Senators are...

Multiple D-Link Products Trust Management Issue Vulnerabilities

The D-Link DIR-600 B1, among others, is a wireless router from AUO D-Link of Taiwan, China. A trust management issue vulnerability exists in multiple D-Link products, which originates from a program with a hard-coded account that can be exploited by an attacker to obtain a remote /bin/sh shell an...

The vulnerability of D-Link DIR-823G router’s microprogramming software lies in the lack of measures to sanitize input data in the Username field. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures for cleaning incoming data in the Username field. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...