D-Link DIR-816 Stack Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless AC750 dual-band router. A stack buffer overflow vulnerability exists in the handler function of /goform/addassignment in the D-Link DIR-816 A2 version 1.10 B05. An attacker can exploit the vulnerability by entering long text in the sip and smac fields to cause the...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

CVE-2021-27114

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

Command injection

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

Stack overflow

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27114

CVE-2021-27114 affects D-Link DIR-816 A2 devices (version 1.10 B05). The vulnerability is a stack-based buffer overflow in the handler function of the /goform/addassignment route, triggered by very long text input in the s_ip and s_mac fields, which could overwrite the return address. This is doc...

CVE-2021-27114

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27113

The CVE-2021-27113 entry concerns D-Link DIR-816 A2 devices (firmware 1.10 B05) where an HTTP request parameter is used to build a command string in the /goform/addRouting handler, enabling Command Injection via Shell metacharacters. Documented impact is severe (CW network-facing, with high likel...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

D-Link DIR-816 A2 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless AC750 dual-band router. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05. The vulnerability stems from the use of HTTP request parameters for command string construction in the handler function of /goform/addRouting. An attacker c...

Unauthorized Access Vulnerability in DIR-816 750M11AC Wireless Router

The AUO DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. The DIR-816 750M11AC wireless router suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in DIR-816

The DIR-816 is a wireless router under the AUO D-Link brand. The DIR-816 suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

D-link DIR-816 A2 Remote Code Injection Vulnerability

The D-link DIR-816 A2 is a wireless AC750 dual-band router. A remote code injection vulnerability exists in the D-link DIR-816. The vulnerability stems from the availability of HTTP request parameters in the command string construction in the handler function of /goform/dirsetWanWifi. The...

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

Command injection

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

CVE-2021-26810

D-Link DIR-816 A2 (firmware v1.10) is affected by a remote code injection vulnerability tracked as CVE-2021-26810. The issue arises from HTTP request parameters used in command string construction within the /goform/dir_setWanWifi handler, enabling command injection via shell metacharacters in th...

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27695)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...