CVE-2022-44804

D-Link DIR-882 firmware versions 1.10B02 through 1.20B06 contain a buffer overflow in the websRedirect() function due to insufficient input length validation. Public sources describe the issue as enabling denial of service or remote code execution if exploited, with the vulnerable component being...

CVE-2022-44804

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44806

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow...

CVE-2022-44808

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...

CVE-2022-44804

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44807

The CVE-2022-44807 entry concerns D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. A buffer overflow in the webGetVarString() function is described as the root cause, allowing potential impact to confidentiality, integrity, and availability. Connected sources confirm the vulnerable compo...

CVE-2022-44807

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

CVE-2022-44807: Out-of-bounds Write

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

CVE-2022-44808: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...

CVE-2022-44801: Undefined Security Weakness

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

CVE-2022-44806

CVE-2022-44806 affects D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. The vulnerability is a buffer overflow in the firmware (root cause: missing length validation in the wan_wan_phy_ifname path of function sub_46D180), enabling a remote attacker to potentially cause denial of service ...

D-Link DIR-823G 操作系统命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. A security vulnerability exists in D-Link DIR-823G firmware version 1.02B03, which stems from its HNAP API function allowing an attacker to implement arbitrary operating system command execution via a carefully crafted HNAP1...

CVE-2022-44801

Affected product: D-Link DIR-878 router (firmware 1.02B05). Issue: incorrect access control allowing authentication bypass (e.g., login with a blank password) that could compromise confidentiality, integrity, and availability. Root cause: access control error in DIR-878 firmware. Exploitation sta...

The vulnerability of the SetSysEmailSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the lack of measures taken to sanitize the input data entered by the user in the input field. Exploiting this vulnerability can allow a remote...

The vulnerability of the SetWebFilterSetting() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetWebFilterSetting function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize input data in the string entered by the user when processing the WebFilterURLs element. Exploiting this vulnerability can...

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a hacker to circumvent security restrictions.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the SetStaticRouteIPv4Settings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetStaticRouteIPv4Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the NetMask element. Exploiting this vulnerability could...

The vulnerability of the SetSysLogSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysLogSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize the input data in the string entered by the user when processing the IPAddress element. Exploiting this vulnerability allows...

The vulnerability of the SetIPv6FirewallSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetIPv6FirewallSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize input data in the string entered by the user when processing the IPv6FirewallRule element. Exploiting this vulnerabili...

The vulnerability in the web interface of D-Link DIR-1935 microprogramming software-enabled routers allows a hacker to execute arbitrary code.

The vulnerability of the web interface for managing D-Link DIR-1935 microprogramming software lies in the buffer overflow that occurs during the processing of the SOAPAction header. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...