The vulnerability of the web interface of D-Link’s microprogrammed router software allows a hacker to execute arbitrary code.

The vulnerability of the web interface of D-Link microprogramming software for routers is related to the insufficient neutralization of special elements used in the OS command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted value of the...

PT-2018-14549 · D Link · Dsl-2640T

Name of the Vulnerable Software and Affected Versions: D-link DSL-2640T routers affected versions not specified Description: A security issue exists in the cgi-bin/webcm component of D-link DSL-2640T routers, where an XSS attack can be performed via the var:RelaodHref or var:conid parameter...

D-Link router httpd server shell command injection vulnerability

The DWR-116, DIR-140, and DIR-640 are all D-Link router products. A shell command injection vulnerability exists in several series of D-Link router httpd servers, where an authenticated attacker can inject shell commands into the Sip parameter of the chkisg.htm page to execute arbitrary code...

D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02398)

D-Link DIR-816 is a home router product from AUO. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which stems from the program's use of the 'datetime' parameter value to construct the 'date -s "%s"' command, which can be exploited by an attacker to this...

D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02394)

D-Link DIR-816 is a home router product from AUO. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a program that uses HTTP requests to build commands, and can be exploited by an attacker for command injection...

D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02395)

D-Link DIR-816 A2 is a wireless router product from AUO D-Link. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates when a program uses HTTP requests to construct commands, and can be exploited by an attacker to execute arbitrary code on a system b...

D-Link DIR-600M Cross-Site Scripting Vulnerability

D-Link DIR-600M is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the DNS Configuration page in the D-Link DIR-600M, which can be exploited by remote attackers to inject arbitrary web script or HTML with the Hostname and Username fields...

The vulnerability of the websRedirect function in the D-Link DIR-816 A2 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the websRedirect function in the D-Link DIR-816 A2 router’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTTP request...

VulnCheck KEV: CVE-2016-20017

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter...

D-Link DIR-620 Router Privilege Access Vulnerability

D-link DIR-620 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-620 using firmware version 1.0.37. The vulnerability can be exploited by a remote attacker to gain access with the help of a TELNET session...

D-Link DIR-620 Router OS Command Injection Vulnerability

D-link DIR-620 is a wireless router product from AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR-620 that stems from the program failing to properly handle the 'resbuf' parameter passed to the index.cgi file. An attacker can exploit this vulnerability to...

CVE-2018-8898

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 A1WI20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT77616E6771696F6E67" allows unauthenticated attackers to perform arbitrary modification read, write to passwords and configurations meanwhile an...

D-Link DIR-816 A2 Stack Buffer Overflow Vulnerability

D-Link DIR-816 A2 is a wireless router product from D-Link.GoAhead is one of the embedded web servers. A stack buffer overflow vulnerability exists in the 'websRedirect' function of GoAhead in the D-Link DIR-816 A2CN using firmware version 1.10B05. A remote attacker could exploit this vulnerabili...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09178)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09180)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

D-Link DSL-3782 Buffer Overflow Vulnerability (CNVD-2018-09182)

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A buffer overflow vulnerability exists in the /userfs/bin/tcapi binary in the D-Link DSL-3782. An attacker could exploit this vulnerability to cause memory corruption, potentially redirect program flow, and execute arbitrary code...

D-Link DSL-3782 Code Execution Vulnerability

The D-Link DSL-3782 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DSL-3782 EU version 1.01. The vulnerability can be exploited by an attacker to cause memory corruption, potentially redirecting program flow and executing arbitrary code...

CVE-2018-10106

D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as demonstrated by a /getcfg.php?a=%0aPOSTSERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZEDGROUP%3D1 request...

PT-2018-4005 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 REV. B versions through DIR-815 REVB FIRMWARE PATCH 2.07.B01 Description: The issue concerns a permission bypass and information disclosure in the /htdocs/web/getcfg.php file of the D-Link DIR-815 REV. B firmware. This can be...

D-Link DIR-815 Cross-Site Scripting Vulnerability

D-Link DIR-815 REV.B is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-815 REV. B using firmware DIR-815REVBFIRMWAREPATCH2.07.B01 and prior versions. A remote attacker can exploit this vulnerability by sending the 'Treturn' parameter to th...