PT-2019-6346 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...

CVE-2019-8318

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...