CVE-2020-27865

The CVE-2020-27865 entry concerns the D-Link DAP-1860 WiFi extender (firmware 1.04B03). A flaw in the uhttpd service causes incorrect string matching when accessing protected pages, enabling network-adjacent attackers to bypass authentication and execute arbitrary code with device privileges. Mul...

CVE-2020-27865

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on T...

CVE-2020-27864

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...

CVE-2020-27864

CVE-2020-27864 affects D-Link DAP-1860 WiFi extenders (firmware 1.04B03). The flaw is in the HNAP service listening on TCP port 80, where the Authorization header is parsed without proper validation and is used to invoke a system call, allowing remote, network-adjacent attackers to execute arbitr...

CVE-2020-27865: Authentication Bypass Using an Alternate Path or Channel

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on T...

CVE-2020-27864: Improper Neutralization of Special Elements used in a Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...

D-Link DAP-1860 has TCP command injection vulnerabilities

The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. A remote code execution vulnerability exists in the D-Link DAP-1860, which stems from a network system or product that does not properly filter external input data during the construction of executable commands, and...

D-Link DAP-1860 and TCP authorization issue vulnerabilities

The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. The D-Link DAP-1860 is vulnerable to a remote code execution vulnerability that could be exploited by attackers to elevate privileges and execute code in the device context...

(0Day) D-Link DAP-3662 httpd Authentication Bypass Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-3662 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the httpd web server. A crafted HTTP...

D-Link DAP-1650 Authentication Bypass Vulnerability

The D-Link DAP-1650 is a WiFi range extender. A security vulnerability exists in the D-Link DAP-1650 authentication mechanism, which can be exploited by a remote attacker to submit a special request for unauthorized access to the device...

CVE-2019-12768

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

CVE-2019-12768

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

Authentication flaw

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

CVE-2019-12768

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

CVE-2019-12768

The CVE-2019-12768 issue affects D-Link DAP-1650 devices prior to 1.04B02_J65H Hot Fix, where an authentication bypass is achievable through forceful browsing. The vulnerability targets the device’s authentication mechanism, enabling unauthorized access without user interaction. A patched version...

PT-2020-9337

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 versions v1.03b07 through v1.03b07 before 1.04B02 J65H Hot Fix However, since the start and end versions in the range are essentially the same, with the end version being more specific in terms of the hotfix, we simplify to:...

CVE-2019-12768: Direct Request

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

D-Link DAP-1650 authorization issue vulnerability

The D-Link DAP-1650 is a WiFi range extender. A security vulnerability exists in the D-Link DAP-1650 authentication mechanism, which can be exploited by a remote attacker to submit a special request for unauthorized access to the device...

D-Link DAP-1860 uhttpd Authentication Bypass Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on TCP port 80 by default. Th...

D-Link DAP-1860 HNAP Authorization Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When...