D-Link DIR-869 安全漏洞

The D-Link DIR-869 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-869 DIR869AxFW102B15 version, which stems from an easy authentication bypass via phpcgi...

CVE-2022-46076

CVE-2022-46076 affects D-Link DIR-869 (DIR869Ax_FW102B15) with an Authentication Bypass via phpcgi. CVSSv3.1 base score 7.5 (HIGH). Root cause: authentication bypass in phpcgi interface. Exploitation status in connected data indicates a PoC exists; NVD entry does not confirm active exploits. Docu...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

Command injection

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

D-Link DIR-3040 命令注入漏洞

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

PT-2022-27320 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...

CVE-2022-44832: Improper Neutralization of Special Elements used in a Command

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

CVE-2022-44832 applies to the D-Link DIR-3040 router, specifically firmware 120B03, where the SetTriggerLEDBlink function fails to filter crafted input and enables command injection. Public sources across NVD/Red Hat/CNVD/CNVD variants consistently describe an arbitrary command execution vulnerab...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

The vulnerability of D-Link DIR-823G router microprogramming software arises from the lack of measures taken to neutralize the special elements used in the operating system’s command set. This vulnerability allows a hacker to execute arbitrary operating system commands.

The vulnerability of the D-Link DIR-823G router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands usin...

DEBIAN-CVE-2022-41720

On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS"C:/tmp".Open"COM1" opens the...

The vulnerability of D-Link DIR-823G router microprogramming software, related to the lack of measures taken to clean data at the control level, allows a hacker to execute arbitrary commands.

The vulnerability of the microprogrammed software of D-Link DIR-823G routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a remote location...

PT-2022-6327 · D Link · D-Link Dir-859 A1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 A1 version 1.05 Description: The issue is related to a command injection vulnerability in the soapcgi main function of the D-Link DIR-859 A1 router's firmware. This vulnerability can be exploited by a remote attacker to execute...

The vulnerability of the webGetVarString() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the webGetVarString function in D-Link DIR-882 wireless routers is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the websRedirect() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the websRedirect function in D-Link DIR-882 wireless router software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software, related to buffer overflow vulnerabilities, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software is related to buffer overflow errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software, related to buffer overflow vulnerabilities, allows a hacker to trigger a service failure.

The vulnerability of D-Link DIR-882 wireless routers’ microprogramming software is related to buffer overflow errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...