CVE-2022-44202

The CVE-2022-44202 entry applies to D-Link DIR878/DIR823G family firmware. Affected firmware versions are 1.02B04 and 1.02B05, where a buffer overflow is caused by insufficient length validation in the sub_4883F0 function. Attackers could potentially exploit this for denial of service or remote c...

CVE-2022-44202

D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow...

The vulnerability of D-Link DIR878 router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR878 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the /bin/proc.cgi parameter...

PT-2022-5706 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR878 versions 1.02B04 through 1.02B05 Description: The issue is related to buffer overflow errors in the D-Link DIR878 wireless router's firmware. Exploitation of this issue may allow a remote attacker to execute arbitrary code...

CVE-2022-43184

D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...

CVE-2022-43184

D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...

Command injection

D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...

CVE-2022-43184

D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...

PT-2022-5275 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR878 version 1.30B08 Hotfix 04 Description: The issue is related to a command injection vulnerability via the component /bin/proc.cgi. This vulnerability may allow a remote attacker to execute arbitrary code. The /bin/proc.cgi...

CVE-2022-43184

D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...

CVE-2022-43184

CVE-2022-43184 affects the D-Link DIR-878 router, specifically firmware 1.30B08 Hotfix_04, where a command injection vulnerability exists in the /bin/proc.cgi endpoint. The included documents indicate this could allow a remote attacker to execute arbitrary commands (potential remote code executio...

PT-2019-6346 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...

D-Link DIR-878 Empty Password Login Vulnerability

The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the /HNAP1 URI in the D-Link DIR-878 version 1.12B01. The vulnerability can be exploited by an attacker to log in to the device with the help of an empty password...

CVE-2019-8318

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...