CVE-2023-51987

CVE-2023-51987 affects D-Link DIR-822+ router (V1.0.2). The HNAP1 interface contains a login bypass that lets an attacker log in to an administrator account using an empty password. Root cause: missing authentication in HNAP1. Impact: potential unauthorized admin access with high confidentiality,...

CVE-2023-51987

D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...

CVE-2023-51984

CVE-2023-51984 affects D-Link DIR-822+ (V1.0.2). The vulnerability is a command injection in the SetStaticRouteSettings function that allows remote attackers to execute arbitrary commands via the shell. Sources from multiple feeds (NVD, Red Hat, CNVD, CNNVD, CVE List) corroborate the impact descr...

CVE-2023-51984

D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell...

D-Link DIR-822 安全漏洞

DIR-822 is a wireless router from D-Link, a Chinese company. A command injection vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-822+ version V1.0.2, which stems from the SetStaticRouteSettings function failing to correctly filter constructor command special characters,...

CVE-2023-51984

D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell...

Number withdrawn

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. This CVE number has been withdrawn...

CVE-2023-51989

CVE-2023-51989 is a reservation/duplicate entry, but connected documents describe a concrete issue: D-Link DIR-822+ (firmware v1.0.2) suffers a login bypass in the HNAP1 interface, allowing login to administrator accounts with empty passwords due to missing authentication for a critical function....

CVE-2023-51989

...

CVE-2023-51989

...

PT-2023-8387 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.2 Description: The issue is related to a lack of authentication for a critical function in the HNAP1 interface of the D-Link DIR-822+ router's firmware. This allows a remote attacker to log in to administrator...

PT-2023-8388 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.2 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands via the shell by exploiti...

The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router microprogramming software is related to insufficient checking of regular expressions during the processing of the uplink parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the SetWiFiVerifyAlpha.php script in D-Link DIR-822 router software allows a hacker to influence the integrity, availability, and confidentiality of the protected information.

The vulnerability of the SetWiFiVerifyAlpha.php script of the D-Link DIR-822 router’s software lies in insufficient validation of arguments passed in the command when processing the WPSPIN parameter. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability,...

D-Link DIR-822 Buffer Overflow Vulnerability

The D-Link DIR-822 is an AC1200 Wi-Fi router. A buffer overflow vulnerability exists in the D-Link DIR-822 v.202KRb06 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow via the long MacAddress data in the /HNAP1/SetClientInfo HNAP protocol message...

CVE-2019-6258

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file...

CVE-2019-6258

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file...

CVE-2019-6258

CVE-2019-6258 affects D-Link DIR-822 Rev.Bx devices with firmware 202KRb06 and older. Root cause: a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP message, mishandled by /usr/sbin/udhcpd while reading /var/servd/LAN-1-udhcpd.conf. Impact: potential high-severity condition...

PT-2020-11202 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822 Rev.Bx devices with firmware version 202KRb06 and older Description: The issue concerns a buffer overflow that can occur when handling long MacAddress data in a "HNAP1/SetClientInfo" HNAP protocol message. This message is...

CVE-2018-19989

In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth...