2000 matches found
CVE-2020-8862
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2020-8862
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2020-8861
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
CVE-2020-8861
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
CVE-2020-8862
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
Authentication flaw
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
Authentication flaw
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2020-8861
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
CVE-2020-8861
The CVE-2020-8861 issue affects D-Link DAP-1330 1.10B01 BETA Wi‑Fi range extenders. It arises from incorrect handling of HNAP login requests and cookies, enabling network‑adjacent attackers to bypass authentication. The vulnerability has been described as allowing the attacker to execute arbitrar...
CVE-2020-8862
CVE-2020-8862 affects D-Link DAP-2610 firmware v2.01RC067, allowing network-adjacent attackers to bypass authentication due to improper password handling, enabling arbitrary code execution in root. Multiple sources (ZDI-20-266) describe an authentication bypass without requiring credentials; Red ...
CVE-2020-8862: Incorrect Comparison
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2020-8861: Incorrect Implementation of Authentication Algorithm
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper...
D-Link DAP-1330 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results fr...
PT-2019-4704
Name of the Vulnerable Software and Affected Versions D-Link DAP-2610 versions v2.01RC067 Description The issue is related to inadequate authentication in the D-Link DAP-2610 firmware, allowing network-adjacent attackers to bypass authentication. The specific flaw exists within the handling of...
PT-2019-4703
Name of the Vulnerable Software and Affected Versions D-Link DAP-1330 versions 1.10B01 BETA Description The issue is related to the incorrect implementation of the HNAP authentication algorithm in the D-Link DAP-1330 Wi-Fi range extender. This allows network-adjacent attackers to bypass...
D-Link DAP-1320 Web Interface Unauthorized Access
The vulnerability of the web interface of D-Link DAP-1320 A2 wireless router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the SS...
CVE-2019-19597
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...
CVE-2019-19598
D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to...