CVE-2019-8318

CVE-2019-8318 concerns D-Link DIR-878 devices (firmware 1.12A1) with a command injection vulnerability. The issue arises when an HNAP API function triggers a call to the twsystem function using untrusted input from the request body, specifically via the SetSysEmailSettings API and illustrated by ...

CVE-2019-8316

CVE-2019-8316 (D-Link DIR-878) involves a command injection in firmware 1.12A1 where any HNAP API function can trigger execution of system commands via untrusted input in the WebFilterURLs field of SetWebFilterSettings, delivered through a crafted /HNAP1 POST request. The vulnerability allows a r...

CVE-2019-8319

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8315

The CVE-2019-8315 issue affects D-Link DIR-878 devices running firmware 1.12A1. It is a Command Injection vulnerability where an attacker can craft a /HNAP1 POST request that triggers a call to twsystem with untrusted input from the request body (SetIPv4FirewallSettings API), demonstrated by shel...

CVE-2019-8315

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8318

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8313

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8317

CVE-2019-8317 affects D-Link DIR-878 devices running firmware 1.12A1. The issue is a Command Injection via a crafted /HNAP1 POST request, where an HNAP API function invokes system with untrusted input from the request body (SetStaticRouteIPv6Settings) and shell metacharacters appear in the DestNe...

CVE-2019-8314

The CVE-2019-8314 vulnerability affects D-Link DIR-878 devices with firmware 1.12A1. It is a remote command-injection in the HNAP API (SetQoSSettings) where untrusted input in the IPAddress field can trigger a system() call via crafted /HNAP1 POST requests, allowing arbitrary OS commands and pote...

CVE-2019-8313

CVE-2019-8313 affects D‑Link DIR-878 devices running firmware 1.12A1. The issue is a Command Injection vulnerability where an attacker can execute arbitrary OS commands via a crafted /HNAP1 POST request. The root cause is input from the request body being passed to the internal twsystem function ...