CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33774

Summary: CVE-2024-33774 describes a buffer overflow in D-Link DIR-619L Rev.B firmware 2.06B1,.path /bin/boa via the formWlanSetup_Wizard parameter “webpage,” enabling remote authenticated users to trigger a DoS. Affected product: D-Link DIR-619L router (firmware 2.06B1). Root cause: insufficient ...

CVE-2024-33773

CVE-2024-33773 maps to a buffer overflow in /bin/boa on D-Link DIR-619L Rev.B 2.06B1, exploitable via the formWlanGuestSetup function and the webpage parameter. This allows remote authenticated users to trigger a DoS. Root cause is a memory corruption in the /bin/boa binary within the affected fi...

CVE-2024-33773

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...

CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...

CVE-2024-33772

CVE-2024-33772 describes a buffer overflow in D-Link DIR-619L Rev.B 2.06B1 firmware, triggered by the curTime parameter in /bin/boa via formTcpipSetup, leading to DoS for remote authenticated users. Multiple sources (NVD/NVD-derived CVE list, Red Hat advisory, CNVD/CNNVD entries, and OpenVAS/deta...

CVE-2024-33771

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33771

CVE-2024-33771 affects D-Link DIR-619L Rev.B (firmware 2.06B1). A buffer overflow in the /bin/boa component via the goform/formWPS endpoint can be triggered by crafting the webpage parameter, allowing remote authenticated users to cause a denial-of-service. The entry does not provide a published ...

CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

CVE-2024-4699

Summary (CVE-2024-4699): D-Link DAR-8000-10 (up to 20230922) is affected by a deserialization vulnerability in the /importhtml.php endpoint. The issue arises from manipulating the sql parameter, enabling remote code execution through unsafe deserialization. This vulnerability is documented across...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24414)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the IPv6 address of the DDP firmware update server. An attacker could exploit...

PT-2024-32324 · D Link · D-Link Dar-8000-10

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000-10 up to 20230922 Description: A critical issue has been found in the processing of the file /importhtml.php, where the manipulation of the sql argument leads to deserialization. This issue can be exploited remotely. The produ...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24416)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set Date Time NTP server. An attacker could exploit the...

D-Link DIR-845L Command Execution Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...

PT-2024-3754 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: A buffer overflow issue in the /bin/boa binary via the formWlanGuestSetup function allows remote authenticated users to trigger a denial of service DoS through the webpage parameter. This...

Unspecified Vulnerability in D-Link DAP-2622

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the DDP firmware upgrade file name. An attacker could exploit the vulnerabilit...