CVE-2023-24762: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in D-Link DIR-867 DIR867FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1...

D-Link DIR-867 Rev. A <= v1.30B07 RCE Vulnerability

D-Link DIR-867 Rev. A devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link 多款路由器缓冲区错误漏洞

The D-Link DIR-878, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in multiple D-Link routers, which stems from the lighttpd service used in the routers failing to validate the length of user input before copying it to a specific buffer. An attacke...

The vulnerability of the Lighttpd microprogramming software library in routers from D-LINK models DIR-867, DIR-878, and DIR-882-US allows a hacker to execute arbitrary code.

The vulnerability of the Lighttpd microprogramming software-based router libraries from D-LINK models DIR-867, DIR-878, and DIR-882-US stems from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP request se...

CVE-2020-15633

CVE-2020-15633 affects D-Link DIR-867-US, DIR-878, and DIR-882-US routers with firmware 1.20B10_BETA. The root cause is incorrect string matching in the handling of HNAP requests, enabling network-adjacent attackers to bypass authentication and potentially escalate privileges to execute code in t...

CVE-2020-15633: Authentication Bypass Using an Alternate Path or Channel

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP...

D-Link DIR-867, DIR-878 and DIR-882 Authentication Bypass Vulnerabilities

The D-Link DIR-878 and D-Link DIR-867 are both a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the HNAP request handling in the DIR-867-US using firmware version 1.20B10 and earlier and the DIR-878 using firmware version 1.20B05 and earlier, which stems from...

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login...

CVE-2020-8863: Incorrect Implementation of Authentication Algorithm

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login...

CVE-2020-8864: Incorrect Comparison

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login...

Logic flaw vulnerability in multiple D-Link routers

The D-Link DIR-882, DIR-878, DIR-867, and DIR-853 are all wireless router products from AUO D-Link. A logic flaw vulnerability exists in multiple D-Link routers, which can be exploited by an attacker to log in as an administrator...

D-Link Multiple Routers HNAP strncmp Incorrect Comparison Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue...