CVE-2023-26616: Buffer Copy without Checking Size of Input

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo...

CVE-2023-26616

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo...

CVE-2023-26616

CVE-2023-26616 affects D-Link DIR-823G firmware version 1.02B05, with a buffer overflow in the URL field of SetParentsControlInfo (HNAP1). Root cause: overflow when processing the URL parameter. Impact: high risk potential (CVE/VM: Denial of Service/compromise of integrity and availability as per...

CVE-2023-26612

The CVE-2023-26612 issue affects D-Link DIR-823G firmware 1.02B05, where a buffer overflow in the HostName field of SetParentsControlInfo (HNAP1) arises from insufficient validation of input length. This is the root cause described across multiple sources; impact is consistent with a high-severit...

CVE-2023-26612

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo...

CVE-2023-26616

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo...

CVE-2023-26612: Buffer Copy without Checking Size of Input

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo...

CVE-2023-26613

An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...

D-Link DIR-859 Router Command Execution Vulnerability

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local...

CVE-2023-26613: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

D-Link DIR-823G 授权问题漏洞

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. A password reset vulnerability exists in the D-Link DIR-823G, which can be exploited by an attacker to cause a reset of the WEB...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

CVE-2023-26615

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

PT-2023-3639 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G firmware version 1.02B05 Description: The issue is related to a password reset vulnerability in the D-Link DIR-823G firmware, which stems from errors in the password recovery mechanism. This vulnerability can be exploited by...

CVE-2023-26615

CVE-2023-26615 affects D-Link DIR-823G firmware 1.02B05. The vulnerability originates from the SetMultipleActions API, enabling unauthorized reset of the WEB page management password via network access. CVSSv3.1 base score 7.5 (High) with no confidentiality impact and high integrity impact; explo...

CVE-2023-26615: Weak Password Recovery Mechanism for Forgotten Password

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password...

dir-shop.cz Cross Site Scripting vulnerability OBB-3468870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dir-shop.cz Cross Site Scripting vulnerability OBB-3463949

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...