229 matches found
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, allows a hacker to execute arbitrary code.
The vulnerability of the SetDynamicDNSSettings module in D-Link wireless router microprogramming software, such as DIR-882 and DIR-878, is related to an issue with buffer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the SetWLanRadioSecurity module in D-Link’s wireless router software, such as DIR-882 and DIR-878, allows a hacker to execute arbitrary code.
The vulnerability of the SetWLanRadioSecurity module in D-Link’s wireless router software, such as the DIR-882 and DIR-878 models, is related to a flaw in buffer handling. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of the SetQuickVPNSettings module in D-Link wireless router software, such as DIR-882 and DIR-878, allows a hacker to execute arbitrary code.
The vulnerability of the SetQuickVPNSettings module in D-Link’s wireless router products, such as DIR-882 and DIR-878, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router microprogramming products such as DIR-867-US, DIR-878, and DIR-882-US allows attackers to circumvent security restrictions, gain increased privileges, or execute arbitrary code.
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router software models such as DIR-867-US, DIR-878, and DIR-882-US lies in the ability to bypass authentication by using an alternative path or channel when processing HTTP requests that include the string “?GetCAPTCHAsetting”...
D-Link DIR-878 <= 1.30B08 Multiple Command Injection Vulnerabilities (Feb 2022)
D-Link DIR-878 devices are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
D-Link DIR-878 缓冲区错误漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-878 version 1.30B08, which stems from a stack overflow discovered via the sub48d630 function. An attacker could exploit this vulnerability to cause a denial of service or execute...
D-Link DIR-878 缓冲区错误漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-878 version 1.30B08, which stems from a stack overflow discovered via the sub498308 function. An attacker could exploit this vulnerability to cause a denial of service or execute...
D-Link DIR-878 缓冲区错误漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-878 version 1.30B08, which stems from a stack overflow discovered via the sub478360 function. An attacker could exploit this vulnerability to cause a denial of service or execute...
D-Link DIR-878 Rev. A <= v1.30B08 RCE Vulnerability
D-Link DIR-878 Rev. A devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
D-Link DIR-878 <= 1.30B08 Multiple Command Injection Vulnerabilities
D-Link DIR-878 devices are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-48108
D-Link DIR878FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload...
CVE-2022-48107
D-Link DIR878FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerability allows attackers to escalate privileges to root via a crafted payload...
D-Link DIR-878 操作系统命令注入漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. The D-Link DIR-878 DIR878FW1.30B08 firmware version suffers from an operating system command injection vulnerability that stems from its /SetNetworkSettings/SubnetMask component that allows attackers to achieve command injection...
D-Link DIR-878 操作系统命令注入漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. The D-Link DIR-878 DIR878FW1.30B08 firmware version suffers from an operating system command injection vulnerability that stems from its /setnetworksettings/IPAddress component that allows an attacker to achieve command injectio...
D-Link 多款路由器缓冲区错误漏洞
The D-Link DIR-878, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in multiple D-Link routers, which stems from the lighttpd service used in the routers failing to validate the length of user input before copying it to a specific buffer. An attacke...
CVE-2022-46566
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module...
CVE-2022-46562
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...
CVE-2022-46562
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...
CVE-2022-46563
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...
CVE-2022-46568
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...