D-Link DAR-8000 代码问题漏洞

DAR-8000-10 is the Internet Behavior Audit Gateway from China AUO D-Link. AUO DAR-8000-10 20230922 and earlier versions have a deserialization vulnerability that originates from the unsafe deserialization of the parameter sql of the file /importhtml.php when receiving serialized data submitted by...

The vulnerability in the script htdocs/webinc/js/bsc_sms_inbox.php of the D-Link DIR-845L router’s microprogramming software allows a attacker to perform XSS attacks.

The vulnerability in the script htdocs/webinc/js/bscsmsinbox.php of the D-Link DIR-845L router operating system allows an attacker to exploit the system by manipulating the $GET"Treturn" parameter during page processing. Exploiting this vulnerability enables a remote attacker to perform XSS attac...

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software exposes a flaw in access control when processing the $GLOBALS"AUTHORIZEDGROUP" parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions and enhance their privileges...

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows an attacker to gain unauthorized access to protected information when processing the $file parameter. Exploiting this vulnerability can enable a remote attacker to obtain unauthorized access to...

CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33774

The D-Link DIR-619L (Rev.B 2.06B1) wireless router contains a buffer overflow vulnerability within the /bin/boa component. The flaw exists in the formWlanSetup_Wizard function, which fails to properly validate the input data length of the "webpage" parameter. A remote authenticated attacker can e...

CVE-2024-33773

A buffer overflow vulnerability exists in the /bin/boa binary on D-Link DIR-619L Rev.B version 2.06B1 routers. The flaw is located within the formWlanGuestSetup function, where operations can exceed memory buffer limits when processing the "webpage" parameter. This allows remote authenticated use...

CVE-2024-33773

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...

CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...

CVE-2024-33772

The D-Link DIR-619L wireless router (specifically Rev.B version 2.06B1 ) is susceptible to a buffer overflow vulnerability in the /bin/boa component. The flaw exists within the formTcpipSetup function because the software fails to properly validate the length of the input data for the curTime par...

CVE-2024-33771

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

CVE-2024-33771

A buffer overflow vulnerability exists in the /bin/boa component of the D-Link DIR-619L Rev.B router (version 2.06B1 ). The flaw is triggered via the goform/formWPS endpoint because the webpage parameter fails to properly validate the length of the input data or fails to properly clear and releas...

CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

CVE-2024-4699

Summary (CVE-2024-4699): D-Link DAR-8000-10 (up to 20230922) is affected by a deserialization vulnerability in the /importhtml.php endpoint. The issue arises from manipulating the sql parameter, enabling remote code execution through unsafe deserialization. This vulnerability is documented across...

CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

D-Link DIR-845L Command Execution Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...

PT-2024-32324 · D Link · D-Link Dar-8000-10

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000-10 up to 20230922 Description: A critical issue has been found in the processing of the file /importhtml.php, where the manipulation of the sql argument leads to deserialization. This issue can be exploited remotely. The produ...