PT-2020-16819

Name of the Vulnerable Software and Affected Versions D-Link DAP-1860 version 1.04B03 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the HNAP servic...

PT-2020-16820

Name of the Vulnerable Software and Affected Versions D-Link DAP-1860 firmware version 1.04B03 Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

D-Link DAP-1360U Command Injection (CVE-2020-26582)

A command injection vulnerability exists in D-Link DAP-1360U. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DAP-136 IP Parameter Command Execution Vulnerability

The D-Link DAP-136 is a wireless network signal extender. The D-Link DAP-136 suffers from a security vulnerability in the handling of IP parameters, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used in an application context to execute...

CVE-2020-26582

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping aka resconfigaction=3&resconfigid=18...

CVE-2020-26582

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping aka resconfigaction=3&resconfigid=18...

Authentication flaw

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping aka resconfigaction=3&resconfigid=18...

CVE-2020-26582

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping aka resconfigaction=3&resconfigid=18...

CVE-2020-26582

CVE-2020-26582 affects D-Link DAP-1360U (pre-3.0.1). The issue is a command-injection via shell metacharacters in the IP JSON value used for ping (res_config_action=3&res_config_id=18), allowing an authenticated remote user to execute arbitrary commands. Impact is remote code execution with high ...

CVE-2020-26582: Improper Neutralization of Special Elements used in an OS Command

D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping aka resconfigaction=3&resconfigid=18...

PT-2020-16466

Name of the Vulnerable Software and Affected Versions D-Link DAP-1360U versions prior to 3.0.1 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping, specifically through the res config action=3&res config id=1...

PT-2020-6514 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to the implementation of the WEB CmdFileList function in the D-Link DAP-2020 Wi-Fi access point's firmware, which fails to neutralize special elements used in operating syste...

PT-2020-6513 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a buffer overflow on the stack in the webproc getpage scenario of the D-Link DAP-2020 Wi-Fi access point's firmware. This can be exploited by network-adjacent attackers to...

D-Link DAP-1522 <= 1.42 Authentication Bypass Vulnerability

D-Link DAP-1522 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP-1520 < 1.10b04Beta02 RCE Vulnerability

D-Link DAP-1520 is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP-1522 Authentication Bypass Vulnerability (CVE-2020-15896)

The D-Link DAP-1522 is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

D-Link DAP-1520 Buffer Overflow (CVE-2020-15892)

A buffer overflow vulnerability exists in D-Link DAP-1520 devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

D-Link DAP-1520 Buffer Overflow Vulnerability

The D-Link DAP-1520 is a wireless access point product from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the apply.cgi file in versions prior to D-Link DAP-1520 1.10b04Beta02. The vulnerability originates when a network system or product performs an operation on memory...

CVE-2020-15631

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...