Lucene search
+L

227 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of the SetTriggerPPPoEValidate() function in the D-Link DIR-3040 wireless router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetTriggerPPPoEValidate function in the D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of the SetMyDLinkRegistration() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetMyDLinkRegistration function in the microprogramming software for D-Link DIR-3040 wireless routers stems from the operation of data out of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafte...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.12 views

The vulnerability of the SetWan3Settings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWan3Settings function in D-Link DIR-3040 wireless router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP...

7.7CVSS7.5AI score0.00705EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of the SetWanSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to TC...

7.7CVSS7.4AI score0.00705EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.8 views

The vulnerability of the SetUsersSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetUsersSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.17 views

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to T...

8.8CVSS8.3AI score0.00846EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.18 views

The vulnerability of the SetWLanRadioSecurity() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWLanRadioSecurity function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of the SetSysEmailSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests ...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.12 views

The vulnerability of the SetQuickVPNSettings() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the PSK parameter. Exploiting this vulnerability allows a malicious actor to execute...

7.7CVSS7.3AI score0.00705EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:00 a.m.12 views

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router operating system exists due to the lack of proper validation of the string provided by the user before it is copied into the fixed-length stack-based buffer. Exploiting this...

7.7CVSS7.2AI score0.00705EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:00 a.m.13 views

The vulnerability of the SetQuickVPNSettings() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the execution of an operation that goes beyond the buffer in memory as a result of executing the prog.cgi script. Exploiting this vulnerability allows a remote...

7.1CVSS8AI score0.00584EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.33 views

D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.31 views

D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.30 views

D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.38 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

7.1CVSS7.3AI score0.00584EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.33 views

D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.22 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.29 views

D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.30 views

D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00705EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.29 views

D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

8.8CVSS7.3AI score0.00846EPSS
SaveExploits0References1
Rows per page
Query Builder