81 matches found
CVE-2023-43197
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function...
CVE-2023-43198
CVE-2023-43198 affects D-Link DI-7200GV2.E1 (v21.04.09E1). The vulnerability is a stack overflow in the H5/hi_block.asp function when processing the popupId parameter, impacting confidentiality, integrity, and availability. No exploitation details are provided in the supplied documents, nor speci...
CVE-2023-43199
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...
CVE-2023-43197
Affected product: D-Link DI-7200GV2.E1 (firmware 21.04.09E1). Issue: stack overflow in tgfile.asp when processing the fn parameter, effectively a buffer overflow in memory. Impact: can compromise confidentiality, integrity, and availability per the provided documents. Root cause: improper handlin...
CVE-2023-43201
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hiup parameter in the qosext.asp function...
CVE-2023-43199
D-Link DI-7200GV2.E1 (v21.04.09E1) is affected by a stack overflow in the H5/login.cgi function triggered via the prev parameter. This issue can lead to a denial of service. Public details across sources consistently describe the vulnerability as a stack overflow in the login.cgi path. A practica...
CVE-2023-43196
CVE-2023-43196 affects D-Link DI-7200GV2.E1 (firmware v21.04.09E1). A stack overflow is triggered by processing the zn_jb parameter in the arp_sys.asp function, enabling a network-borne issue with high impact. The NVD entry assigns a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vecto...
PT-2023-5332 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the H5/hi block.asp function when processing the popupId parameter. This can allow a remote attacker to impact the confidentiality,...
PT-2023-5385 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the yyxz.data function when processing the id parameter, potentially allowing a remote attacker to impact the confidentiality, integrity,...
CVE-2021-46233
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function mspinfo.htm. This vulnerability allows attackers to execute arbitrary commands via the cmd parameter...
CVE-2021-46233
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function mspinfo.htm. This vulnerability allows attackers to execute arbitrary commands via the cmd parameter...
CVE-2021-46228
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...
CVE-2021-46231
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrdopt.asp. This vulnerability allows attackers to execute arbitrary commands via the urlen parameter...
CVE-2021-46231
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrdopt.asp. This vulnerability allows attackers to execute arbitrary commands via the urlen parameter...
CVE-2021-46226
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wgettest.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter...
CVE-2021-46228
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...
CVE-2021-46230
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
CVE-2021-46227
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxyclient.asp. This vulnerability allows attackers to execute arbitrary commands via the proxysrv, proxysrvport, proxylanip, proxylanport parameters...
CVE-2021-46230
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgradefilter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters...
CVE-2021-46226
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wgettest.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter...