CVE-2024-23624

A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

CVE-2024-23625

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

D-Link DAP-2555 DoS Vulnerability (SAP10232)

D-Link DAP-2555 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

/sbin/httpd system DAP-2555 DoS

The vulnerability of the /sbin/httpd microprogramming system used by D-Link DAP-2555 wireless access points is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP...

D-Link DAP-1520 DoS Vulnerability (SAP10395)

D-Link DAP-1520 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP-1513 Multiple Vulnerabilities (Nov 2022)

D-Link DAP-1513 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP-1513 DoS

The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points is related to errors in pointer redirection due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted HTTP...

D-Link DAP-2555 Denial of Service Vulnerability

The D-Link DAP-2555 is a wireless access point from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-2555 REVAFIRMWARE1.20 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

D-Link DAP-1513 Denial of Service Vulnerability

The D-Link DAP-1513 is a wireless bridge from China-based AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-1513 REVAFIRMWARE1.01 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

D-Link DAP-1520 Denial of Service Vulnerability

The D-Link DAP-1520 is a wireless access point product from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-1520 REVAFIRMWARE1.10B04BETA02HOTFIX version, which originates from a null pointer dereference. An attacker can exploit the vulnerability to cause a denial of...

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-36832

A NULL pointer dereference in D-Link DAP-1513 REVAFIRMWARE1.01 allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it wil...

CVE-2024-36831

A NULL pointer dereference in the pluginscallhandleuriclean function of D-Link DAP-1520 REVAFIRMWARE1.10B04BETA02HOTFIX allows attackers to cause a Denial of Service DoS via a crafted HTTP request without authentication...

CVE-2024-36831

A NULL pointer dereference in the pluginscallhandleuriclean function of D-Link DAP-1520 REVAFIRMWARE1.10B04BETA02HOTFIX allows attackers to cause a Denial of Service DoS via a crafted HTTP request without authentication...

CVE-2024-36832

The D-Link DAP-1513 wireless bridge is vulnerable to a Denial of Service (DoS) attack affecting the REVA_FIRMWARE_1.01 version. The root cause is a NULL pointer dereference within the /bin/webs binary, triggered by incorrect checking of HTTP request formats . An unauthenticated attacker can explo...

CVE-2024-37607: Buffer Copy without Checking Size of Input

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37607

The D-Link DAP-2555 wireless access point is vulnerable to a buffer overflow in the REVA_FIRMWARE_1.20 version. The issue resides in the /sbin/httpd microprogramming system, where operations can escape the memory buffer when processing specially crafted HTTP requests. An attacker can exploit this...

CVE-2024-36832

A NULL pointer dereference in D-Link DAP-1513 REVAFIRMWARE1.01 allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it wil...