Lucene search
+L

258 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•20 views

The vulnerability of the SetWan3Settings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWan3Settings function in D-Link DIR-3040 wireless router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP...

7.7CVSS7.5AI score0.00874EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•19 views

The vulnerability of the SetWanSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to TC...

7.7CVSS7.4AI score0.009EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•19 views

The vulnerability of the SetQuickVPNSettings() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the PSK parameter. Exploiting this vulnerability allows a malicious actor to execute...

7.7CVSS7.3AI score0.00874EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•17 views

The vulnerability of the SetUsersSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetUsersSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to...

7.7CVSS7.3AI score0.009EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•23 views

The vulnerability of the SetWLanRadioSecurity() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWLanRadioSecurity function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests...

7.7CVSS7.3AI score0.00874EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/02 12:00 a.m.•20 views

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router operating system exists due to the lack of proper validation of the string provided by the user before it is copied into the fixed-length stack-based buffer. Exploiting this...

7.7CVSS7.2AI score0.009EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/13 12:00 a.m.•22 views

The vulnerability of the SetQuickVPNSettings() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the execution of an operation that goes beyond the buffer in memory as a result of executing the prog.cgi script. Exploiting this vulnerability allows a remote...

7.1CVSS8AI score0.00746EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/07 12:00 a.m.•25 views

PT-2023-5545 · D Link +1 · D-Link Dir-3040 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: The issue exists due to the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer in the prog.cgi file. This allows a remote...

7.7CVSS7AI score0.009EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•38 views

D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•43 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

7.1CVSS7.3AI score0.00746EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•34 views

D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•35 views

D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•36 views

D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•36 views

D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•33 views

D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•30 views

D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•37 views

D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•33 views

D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•39 views

D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/09/07 12:00 a.m.•37 views

D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.3AI score0.00874EPSS
SaveExploits0References1
Rows per page
Query Builder