CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A hard-coded password vulnerability exists in D-Link DIR-605L v2.13B01, which can be exploited by an attacker to log in as root and gain administrator privileges...

CVE-2024-37630

The CVE-2024-37630 affects D-Link DIR-605L v2.13B01 (firmware). A hardcoded password in /etc/passwd allows an attacker to log in as root and obtain administrator privileges. Public documents consistently describe root-level compromise; no explicit firmware fix version is provided. PT-Security not...

PT-2024-4264 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A hardcoded password vulnerability was discovered in the /etc/passwd component of the D-Link DIR-605L router's firmware. This issue allows attackers to log in as root, potentially granting them ful...

CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

The vulnerability of the prog.cgi file in D-Link DIR-2640 router microprogramming software allows a hacker to execute arbitrary code in the root context.

The vulnerability of the prog.cgi file in D-Link DIR-2640 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context by sending specially crafted HNAP requests to TCP ports 80 an...

The vulnerability of the DNACore software service, used for configuring D-Link Network Assistant network devices, allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the DNACore software service used to configure D-Link Network Assistant network devices is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

PT-2024-9689 · D Link · D-Link Dap-2555

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2555 version REVA FIRMWARE 1.20 Description: A buffer overflow vulnerability in the D-Link DAP-2555 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request. The issue is related to the /sbin/httpd file a...

The vulnerability of D-Link DI-7003GV2 router microprogramming software, related to improper cleaning or release of resources, allows a intruder to trigger a service failure.

The vulnerability of D-Link DI-7003GV2 router microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by intercepting TCP/IP sessions...

The vulnerability of the TokenUtils class in the D-Link D-View software platform allows a hacker to gain elevated privileges by bypassing the authentication process in the system.

The vulnerability of the TokenUtils class in the D-Link D-View software platform for comprehensive network management is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges by bypassing the authentication...

PT-2024-4653 · D Link · D-Link Dir-1950

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1950 versions up to v1.11B03 Description: The issue is related to the failure to validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to perform a man-in-the-middle...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

PT-2024-9688 · D Link · D-Link Dap-1513

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1513 version REVA FIRMWARE 1.01 Description: A null pointer dereference in the /bin/webs binary of the firmware allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. When the /bin/webs...

PT-2024-4005 · D Link · D-Link Di-7003Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 affected versions not specified Description: The issue allows attackers to hijack TCP sessions, potentially leading to a denial of service. It is related to incorrect clearance or release of resources, which can be exploited...

D-Link DIR-3040 Memory Leak Vulnerability

The D-Link DIR-3040 is a router from China's AUO D-Link. It provides the function of connecting to the network. The D-Link DIR-3040 suffers from a memory disclosure vulnerability that originates from not freeing or failing to free dynamically allocated heap memory, which can be exploited by an...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A code execution vulnerability exists in D-Link D-View that stems from the application failing to properly filter special elements that construct code segments. An attacker could exploit the vulnerabilit...

D-Link DIR-2640 Buffer Overflow Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary co...

D-Link DIR-2150 Code Execution Vulnerability

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. The D-Link DIR-2150 suffers from a code execution vulnerability that stems from an application failing to properly filter special elements that construct code segments. An unauthenticated attacker could exploit the vulnerabilit...