CVE-2019-8314: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8318: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

PT-2019-1621

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description An issue allows a remote attacker to execute arbitrary code and get a root shell through a Command Injection vulnerability. This occurs when any HNAP API function triggers a call to the system function...

PT-2019-1620

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs due to insufficient input validation in the SetWebFilterSettings API...

PT-2019-1623

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection vulnerability in the SetStaticRouteIPv4Settings API function, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when th...

PT-2019-1616

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when the twsystem function is called with untrusted input from the...

PT-2019-1618

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to insufficient input validation in the SetQoSSettings function of the D-Link router's firmware, allowing a remote attacker to execute arbitrary code. This can be achieved through ...

PT-2019-1617

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to insufficient input validation in the SetIPv6FirewallSettings API function, allowing a remote attacker to execute arbitrary code. This can be achieved through a Command Injection...

PT-2019-1619

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue allows a remote attacker to execute arbitrary code and gain a root shell through a Command Injection vulnerability. This occurs when the twsystem function is called with untrusted input from...

PT-2019-1622

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection vulnerability in the SetSysEmailSettings API function, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when the...