CVE-2024-48637

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48631

CVE-2024-48631 affects D-Link DIR-882 (FW130B06) and DIR-878 (FW130B08). A command-injection vulnerability exists in the SetWLanRadioSettings function, enabling an attacker to execute arbitrary OS commands via a crafted POST request to the SSID parameter. Public documents describe impact as remot...

CVE-2024-48634

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48635

D-Link DIR-882 (firmware FW130B06) and DIR-878 (firmware FW130B08) expose a command injection in SetVLANSettings. The root cause is a lack of neutralization of special elements in the VLANID:2/VID parameter, allowing an attacker to run arbitrary OS commands via a crafted POST request. Public sour...

CVE-2024-48638

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

D-Link DIR-619L formSetMuti function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-619L B12.06 version, which originates from the parameter curTime in the file /goform/formSetMuti that fails to correctly validate the length size of the input data, and can b...

CVE-2024-48636

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48629

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

D-Link DIR-619L B1 Buffer Overflow Vulnerability

The DIR-619L B1 is a home network router that provides high-speed Wi-Fi connectivity, is easy to set up and has multiple ports. A buffer overflow vulnerability exists in the D-Link DIR-619L B1. An attacker could use this vulnerability to modify the state of the program, such as by overwriting the...

The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 allows a hacker to execute arbitrary code.

The vulnerability of the wireless router web services from D-Link, namely DIR-X4860, DIR-X5460A1, and COVR-X1870, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the device...

D-Link DIR-619L B1 Buffer Overflow Vulnerability (CNVD-2024-41691)

The D-Link DIR-619L B1 is a wireless router manufactured by D-Link. A buffer overflow vulnerability exists in the D-Link DIR-619L B1 2.06 firmware. The vulnerability is caused due to buffer overflow by buffer copying without checking the input size thus affecting the formSetWizardSelectMode...

The vulnerability of the Telnet service of D-Link’s wireless routers, such as DIR-X4860, DIR-X5460A1, and COVR-X1870, allows a hacker to execute arbitrary commands in the basic operating system.

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the presence of undocumented configuration commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system using hard-coded credentials...

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers allows a intruder to gain unauthorized access to confidential information.

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...

The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 allows a hacker to execute arbitrary code.

The vulnerability of the wireless router web services of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the device...

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers allows a intruder to gain unauthorized access to confidential information.

The vulnerability of D-Link DIR-X4860, DIR-X5460A1, and COVR-X1870 wireless routers lies in the presence of undocumented configuration commands. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information by forcing the telnet service to operate...

CVE-2024-48168

A stack overflow vulnerability exists in the sub402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code...

CVE-2024-48150

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub451208 function...

CVE-2024-48150

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub451208 function...

CVE-2024-48168

A stack overflow vulnerability exists in the sub402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code...

D-Link DI_8200 Command Injection Vulnerability

The D-Link DI8200 is an enterprise router from China's AUO D-Link. The D-Link DI8200 suffers from a command injection vulnerability that originates from manipulation of the parameter path in the file upgradefilter.asp. No details of the vulnerability are provided at this time...