PT-2023-6712

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description The issue is related to a stack overflow vulnerability in the /goform/formSchedule component of the D-Link N300 WI-FI Router DIR-605L, which can be exploited via the curTime...

CVE-2023-24348

CVE-2023-24348 affects D-Link DIR-605L (N300 Wi‑Fi router) firmware v2.13B01, with a stack overflow in the curTime parameter processed by /goform/formSetACLFilter. The issue is described as a critical remote condition with high impact to confidentiality, integrity, and availability (CVSS 3.1: 9.8...

CVE-2023-24349

The CVE-2023-24349 entry concerns the D-Link N300 Wi‑Fi Router DIR-605L, firmware v2.13B01. A stack overflow is triggered via the curTime parameter in the /goform/formSetRoute API, which may allow remote disruption or code execution per the referenced CNVD/Red Hat entries. The connected documents...

CVE-2023-24345

D-Link DIR-605L (N300), firmware v2.13B01, affected by CVE-2023-24345: a stack/buffer overflow via the curTime parameter in /goform/formSetWanDhcpplus. Public sources warn it could enable remote code execution or service disruption; no remediation details are provided in the supplied documents.

D-Link DIR-825 Rev B Multiple Vulnerabilities (2019 - 2025)

D-Link DIR-825 Rev. B devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-846 Command Execution Vulnerability (CNVD-2023-27681)

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...

D-Link DIR-825 Rev R1 <= 3.0.1 RCE Vulnerability

D-Link DIR-825 Rev. R1 devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the MiniDLNA service, a microprogramming software for wireless routers from D-Link, DIR-3040, allows a hacker to execute arbitrary code.

The vulnerability of the MiniDLNA service, a microprogramming software for wireless routers from D-Link, DIR-3040, is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

Design/Logic Flaw

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

CVE-2022-46552: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

D-Link DIR-846 操作系统命令注入漏洞

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...

CVE-2022-46552

CVE-2022-46552 affects D-Link DIR-846 firmware FW100A53DBR, exposing a remote command execution vulnerability via the lan(0)_dhcps_staticlist parameter. The issue can be triggered by a crafted POST request, enabling arbitrary commands on the device. Multiple connected sources corroborate the vuln...

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

VulnCheck KEV: CVE-2019-10891

An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnapmain, which calls system without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header...

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...

Buffer overflow

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint...