Stack overflow

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...

Authentication flaw

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

CVE-2022-37133

The CVE-2022-37133 entry concerns D-Link DIR-816 DIR-816 A2 firmware A2_v1.10CNB04.img. The issue allows rebooting the router without authentication via the /goform/doReboot endpoint; a reboot is executed when the function returns, with no authentication required. This yields an impact to availab...

CVE-2022-37134

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...

CVE-2022-37134

CVE-2022-37134 affects D-Link DIR-816 A2 v1.10CNB04.img. The vulnerability is a buffer/stack overflow in /goform/form2Wan.cgi when wantype is 3: l2tp_usrname is base64-decoded into v94 without verifying size, leading to a stack overflow and potential code execution. Documented impacts include cod...

PT-2022-23829 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the router to reboot without authentication via the "/goform/doReboot" API endpoint. No authentication is required, and the reboot is executed when the function returns at the end...

PT-2022-23830 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04.img Description: The issue arises from a Buffer Overflow vulnerability via the /goform/form2Wan.cgi endpoint. When wantype is 3, the l2tp usrname will be decrypted by base64, and the result will be stored ...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the mirrored version of the D-Link DIR-816 firmware A2v1.10CNB04.img, which stems from a reboot that will be executed when the function finally returns and does not require authentication by th...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64490)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 firmware version, which originates from a boundary error in the lanip parameter in /goform/setNetworkLan when handling untrusted input. An attacker...

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)

The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64489)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 firmware version, which originates from a boundary error in the proto parameter in /goform/form2IPQoSTcAdd when handling untrusted input. An attacker...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64487)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the MAC parameter in /goform/editassignment when handling untrusted input. An attacker...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64491)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the addhostfilter parameter in the device/goform/websHostFilter when processing untrusted input. A...

CVE-2022-29321

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

CVE-2022-29327

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel...

CVE-2022-29327

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel...

CVE-2022-29324

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd...

CVE-2022-29321

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

CVE-2022-29322

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip...