Lucene search
+L

2000 matches found

NVD
NVD
•added 2021/07/15 6:15 p.m.•42 views

CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS0.02333EPSS
SaveExploits0References1
Prion
Prion
•added 2021/07/15 6:15 p.m.•32 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.3CVSS8.8AI score0.02333EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/15 6:15 p.m.•10 views

CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS7.6AI score0.02333EPSS
SaveExploits0References2
Prion
Prion
•added 2021/07/15 6:15 p.m.•32 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...

8.3CVSS8.8AI score0.02333EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/07/15 6:15 p.m.•8 views

CVE-2021-34830

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...

8.8CVSS7.6AI score0.02333EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/07/15 5:35 p.m.•42 views

CVE-2021-34830

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...

8.8CVSS8.9AI score0.02333EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/15 5:35 p.m.•98 views

CVE-2021-34830

CVE-2021-34830 affects D-Link DAP-1330 routers. The flaw is a stack-based buffer overflow in the handling of the HTTP Cookie header, caused by inadequate validation of user-supplied data length before copying to a fixed-length buffer. This leads to remote code execution with no authentication req...

8.8CVSS8.8AI score0.02333EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/07/15 5:35 p.m.•100 views

CVE-2021-34829

CVE-2021-34829 affects D-Link DAP-1330 routers (1.13B01 BETA). A flaw in handling the HNAP_AUTH header allows a network-adjacent attacker to overflow a fixed-length buffer, enabling remote code execution in the device context. The root cause is insufficient validation of the length of user-suppli...

8.8CVSS8.8AI score0.02333EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/15 5:35 p.m.•43 views

CVE-2021-34829

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...

8.8CVSS8.9AI score0.02333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/15 5:35 p.m.•35 views

CVE-2021-34828

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS8.9AI score0.02333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/15 5:35 p.m.•45 views

CVE-2021-34827

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS8.9AI score0.02333EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/15 5:35 p.m.•101 views

CVE-2021-34827

CVE-2021-34827 affects D-Link DAP-1330 1.13B01 BETA routers. The issue is a stack-based buffer overflow in the handling of the SOAPAction HTTP header caused by improper validation of the length of user-supplied data, enabling network-adjacent attackers to execute arbitrary code in the device cont...

8.8CVSS8.8AI score0.02333EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•20 views

D-Link DAP-1330 security vulnerability

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which stems from a lack of proper validation of the length of user-supplied data before copying it to a stack-based fixed-length buffer. An attack...

8.8CVSS6AI score0.02333EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•17 views

D-Link DAP-1330 security vulnerability

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which originates from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker...

8.8CVSS5.9AI score0.02333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/15 12:00 a.m.•4 views

PT-2021-20674

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1330 version 1.13B01 BETA Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of t...

8.8CVSS0.02333EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•24 views

D-Link DAP-1330 security vulnerability

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which stems from a lack of proper validation of the length of user-supplied data before copying it to a stack-based fixed-length buffer. An attack...

8.8CVSS6AI score0.02333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•7 views

CVE-2021-34830: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...

8.8CVSS6.7AI score0.02333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•9 views

CVE-2021-34828: Buffer Copy without Checking Size of Input

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS6.6AI score0.02333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•10 views

CVE-2021-34827: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS6.7AI score0.02333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•11 views

CVE-2021-34829: Buffer Copy without Checking Size of Input

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...

8.8CVSS6.6AI score0.02333EPSS
SaveExploits0References2
Rows per page
Query Builder