D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control in the form2PortriggerRule.cgi component, which can be exploited by an unauthenticated attacker to set a port trigger via a...

D-Link DIR-823X 安全漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-823X version 240126/240802 that stems from the presence of a null pointer dereference. No details of the vulnerability are provided at this time...

The vulnerability of the formResetStatistic function (/goform/formResetStatistic) in D-Link DIR-619L router software allows a hacker to trigger a service failure.

The vulnerability of the formResetStatistic function /goform/formResetStatistic in D-Link DIR-619L router software lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow an attacker to caus...

The vulnerability in the web interface for managing D-Link DIR-823G microprogramming routers allows a hacker to alter the device’s configuration.

The vulnerability of the web interface for managing D-Link DIR-823G microprogramming devices is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration by sending a specially crafted HTTP POST request...

CVE-2024-13107 D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been classified as critical. This affects an unknown part of the file /goform/form2LocalAclEditcfg.cgi of the component ACL Handler. The manipulation leads to improper access controls. It is possible to initiate the atta...

PT-2025-3538 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: An access control issue in the component form2alg.cgi of D-Link 816A2 FWv1.10CNB05 R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST reque...

FICORA, CAPSAICIN Botnets Exploit Old D-Link Router Flaws for DDoS Attacks

Mirai and Keksec botnet variants are exploiting critical vulnerabilities in D-Link routers. Learn about the impact, affected devices, and how to protect yourself from these attacks...

The vulnerability of the SetWanSettings function in D-Link DIR-823G router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetWanSettings function in D-Link DIR-823G router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the HostName parameter. Exploiting this vulnerability allows a remote attacke...

CVE-2024-11959

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The...

The vulnerability of the tgfile_htm function in D-Link DI-8003 router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tgfilehtm function in D-Link DI-800 router microprogramming software is related to the execution of operations outside the buffer during the processing of the fn parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity...

D-Link DI-8400 安全漏洞

The D-LINK DI-8400 is an American D-Link router device for home and small business network connectivity. Multiple remote command execution vulnerabilities exist in the mspinfohtm function in the D-LINK DI-8400 version v16.07.26A1 via the flag and cmd parameters. A remote attacker can exploit this...

The vulnerability of the “set Diagnostics_Entry” function in D-Link DSL-3782 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the “set DiagnosticsEntry” function in D-Link DSL-3782 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DSL6740C OS Command Injection Vulnerability (CNVD-2024-45431)

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via a specific...

D-Link DI-8003 Command Injection Vulnerability

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DI-8003 version 16.07.16A1, which stems from the parameter path in the file /upgradefilter.asp failing to correctly filter construct command special characters, commands, et...

D-Link DWR-2000M 跨站脚本漏洞

The D-Link DWR-2000M is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link DWR-2000M. A local attacker can exploit the vulnerability to obtain sensitive information by sending a crafted payload to the WiFi SSID name field...

D-Link DSL6740C 操作系统命令注入漏洞

The D-Link DSL6740C is a wireless VDSL router from China's AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via specific...

Unspecified Vulnerability in D-Link DSL6740C

The D-Link DSL6740C is a wireless router developed by D-link. The D-Link DSL6740C suffers from a security vulnerability that stems from the use of an insecure default wifi password, which can be exploited by an attacker to gain unauthorized access to the system...

The vulnerability of the formSetDomainFilter() function (/goform/formSetDomainFilter) in the D-Link DIR-605L router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDomainFilter function /goform/formSetDomainFilter of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the formDeviceReboot function (/goform/formDeviceReboot) in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formDeviceReboot /goform/formDeviceReboot function in D-Link DIR-605L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the formEasySetupWWConfig function (/goform/formEasySetupWWConfig) in D-Link DIR-605L router software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetupWWConfig function /goform/formEasySetupWWConfig in D-Link DIR-605L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary co...